• Votes

    17

    Customize Email-Alert fields

    Situation: in the js-email-alert function you can choose between "Important Data", "All-Data", and "Minimal Data". If you use CustomVariable or need some other variables ...

  • Planned

    16

    Export PDF reports with password protection in Sentinel

    The possibility to export reports (CSV, PDF or other format) with password protection to increase security and sending by email.

  • Votes

    13

    Multiple roles for users

    Current user role allocation supports well administration, but how to allocate rights easily in user environment (for users that only go there to search events and run ...

  • Votes

    8

    Customisation WebUI

    Like in other Soltware solutions there should be a possibility to customise the Login Page of Sentinel. There should be two things: - customize the login page with the ...

  • Votes

    7

    Enable Users to Toggle Case Sensitivity in Dynamic Lists

    When leveraging values in dynamic lists, Sentinel currently enforces case sensitivity when using those values in correlation rules. In some cases, this can be misleading ...

  • Votes

    6

    Read only user

    There should be a posibility to create a read omly user in Sentinel. This is important for Auditors to check the system. This user should have the rights to see ...

  • Votes

    6

    File Connector - Keep file offset data stored while moving log source ...

    Now, when moving file log source from cm to another it does not store offset data. This should be fixed. -Br, TimoS

  • Votes

    6

    Possibility to restart individual Event source via CLI or REST API

    Background: We have severe problems with File Connector log sources and have not get solution for that yet. For some reason file reading hangs occasionaly and never ...

  • Votes

    6

    Asset mapping for hostnames

    Current Asset mapping works only for IP and tenant name as a keys. But some customers use hostnames as the asset identification as they use DHCP servers. It is not ...

  • Votes

    6

    Email zipped events in notification when correlation rule hits.

    We need the events to be zipped in mail notification as it becomes easier to analyze events if there are too many events.

  • Votes

    5

    Make correlation event retention length configurable separately from ...

    Provide the means to configure correlation event retention to a different period than data event retention in order to prevent the PostgreSQL from growing too large.

  • Votes

    5

    Sentinel does not provide an explicit logout message

    Please provide the following enhancement to the NetIQ Sentinel web interface: An explicit logout message indicating that the authenticated communications session has been ...

  • Votes

    5

    Import event sources

    We have more than 200 servers which need to be created in multiple collectors. It would be great to import them via a CSV.

  • Votes

    5

    Tenant based roles to allow to run remote searches or manage ...

    Customer reported that they are planning to deploy a multi tenant Sentinel system. They would like to use multi-tier architecture, where they have multiple Sentinel for ...

  • Votes

    5

    Need some more granularity for user permissions

    There are some features/functions, which only accessible for "super-users", e.g. creating/maintaining Actions, configuring Storage, etc... Our main issue currently, how ...

  • Votes

    5

    Update SSL Certificates

    Please either allow or build in a function to allow the update of an SSL certificate issued from either a third party CA or an internal CA for website functionality. In ...

  • Votes

    3

    Configuring Sentinel Web Console Settings From Red Hat/RestAPI

    Please provide the means to automate or configure the following Sentinel Web Console settings via Red Hat or RestAPI: -Secondary Storage location -Primary Storage ...

  • Votes

    3

    Configure connection when cloning event source

    When cloning an event source, it will keep the connection to the source server, which is useless. When we create a template event source, which we would like to apply to ...

  • Votes

    3

    Make Data Source selection permanent

    Data Source selection should be made permanent so that it is selected every time you make a search. Now it should be manually ticked every time you make a new search.

  • Votes

    3

    Customize the search result fields

    Search result display a set of attributes ie sn: sip: , this can be expanded upon by selecting the more option and you can view all the results by selecting the All ...