We love to hear your ideas for improving Sentinel.

Page 8 
190 Ideas
183 Comments
805 Votes
  • Votes

    1

    Fix your post 8.2.2.0 installer to require 4 CPUs

    Sentinel 8.2.2.0 will not successfully install on Linux without 4 cores assigned to the box. I recently spent around a week trying to get a clean 8.2.2.0 install to work ...

    Comments (0) | by: Rob M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Installation/Deployment
  • Votes

    1

    Option to Stopp Collector and delete all incoming Events

    When a collector ist stopped the incoming events are stored (PageFiles) and a filesystem can be filled with this files. So an second option would be very usefull: The ...

    Comments (0) | by: Ulrich S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    1

    Read SAP Security Audit Log via RSAU_API_GET_ALERTS

    From SAP Note 2191612 - FAQ | Use of Security Audit Log as of SAP NetWeaver 7.50 42. Can recorded events be promptly transferred to a central alert cockpit? The RFC ...

    Comments (0) | by: Norbert K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    1

    Disable User - Improved

    Current Process: Edit User Disable user account Save ERROR Save user failed ERROR Passwords don't match *Have to set password just to disable. Why? Proposed Process 1: ...

    Comments (2) | by: Bryan W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    1

    ArcSight CEF CustomFieldMap

    Need to include CEF Custom String and Number Labels out of the box. Labels are different for each product. ~~Sentinel Event Field~~,~~Input Record Field~~ ...

    Comments (1) | by: Bryan W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    1

    User Inactivity Timeout

    Need User Inactivity Timeout option. Session timeout exists but will kill session while user is actively working. GUI 'Security' section preferred.

    Comments (0) | by: Bryan W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    1

    Limit concurrent user sessions

    Need option to limit concurrent user sessions in Sentinel Client Request

    Comments (0) | by: Bryan W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    1

    Allow to comment on each event in an alert separately

    In some cases to differentiate events that are attached to an alert analysts have to document some information for each event separately (i.e. each event having different ...

    Comments (0) | by: Piotr G. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualizations
  • Votes

    1

    File Connector: File missing log event should contain event source ...

    When file connector reports file missing. The event should contain event source information. This event is created in /var/opt/novell/sentinel/server0.0.log file.

    Comments (0) | by: Timo S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    1

    Event Export Filters

    When exporting the Events from a Search query, there is only "Select All"/"Clear All". More often than not, a user would export the same fields for queries they run ...

    Comments (0) | by: Ben W. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    1

    Symantec DPL Connector

    A connector to connect Symantec Data Loss Protection is urgently needed. Clients have requested it.

    Comments (0) | by: John G. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    1

    Customer needs Microsoft Radius data to be parsed correctly.

    A customer has Microsoft Radius server and they need to be able to search on the mac address. Unfortunately all other systems use a format like this: 00:AA:00:12:34:56, ...

    Comments (0) | by: Henk T. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    1

    Support the Gofer daemon for Redhat systems

    goferd is a systems management component used by older Redhat systems. It's since superceded, but some customers may need to support it because it's already part of ...

    Comments (1) | by: Brandon L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    1

    Provide end user with alertable event when Agent Manager Central ...

    Ideally, we want the server to send a last message to the back-end when the Central Computer shuts down, but alternatively maybe there needs to be a 'are you alive' check ...

    Comments (0) | by: Brandon L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    1

    file connector

    In Event Source Management, when processing a file with the file connector, once processing begins under connection information, it states "Reading file..." this is good ...

    Comments (0) | by: Johnnie S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    1

    Expose important rotating file information from the file connector

    Originally tracked in Bug https://bugzilla.netiq.com/show_bug.cgi?id=779084 The RotatingFile event currently only uses the message field (e.g. "Rotating file from ...

    Comments (0) | by: Brandon L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    1

    it could be interesting for performance pupose to deactivate graphical ...

    when the number of nodes is too high, the graphical view can take time before automatic deactivation (once there are more than 5000 nodes, the graph view will ...

    Comments (0) | by: david a. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    1

    General users should be able to view Health Status Info

    General users should be able to view but not edit or modify the following collection - Overview & Event sources Storage - Health, report jobs, search jobs When ...

    Comments (1) | by: Gus M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    1

    Salesforce collector

    Micro Focus should have a Salesforce collector. this from Salesforce describes a very typical usecase: ...

    Comments (0) | by: Pekka L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    1

    IBM zOS Collector

    IBM zOS mainframe collector to help parse and correlate the logs sent to sentinel. This type of collector would help translate RACF logs and Type80 send logs in CEF ...

    Comments (1) | by: David E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations