• Planned

    8

    User behavior analytics(UBA)

    All leading SIEM products provide UBA; its a must feature for any modern-day SIEM. Unavailability of UBA is one of the major reason, competitors take edge in POC demos ...

  • Votes

    6

    Normalize severity against a standard severity scale rather than ...

    Different vendors attribute different severities to certain types of events based on their own internal way of looking at the data. When Sentinel sets the severity, it ...

  • Votes

    1

    General users should be able to view Health Status Info

    General users should be able to view but not edit or modify the following collection - Overview & Event sources Storage - Health, report jobs, search jobs When ...

  • Votes

    3

    Microsoft ATA

    Create and release to test a new Microsoft ATA collector plugin for Sentinel 7/8 to integrate with leading edge threat analytics platforms

  • Votes

    6

    Support Wildcarding In Dynamic Lists

    Dynamic Filters should allow the same CIDR notation and wildcarding that Lucene allows specifically for IP addresses. Should also allow ranges like 10.14.1.[1-50]

  • Votes

    2

    iSeries agent for Sentinel Agent Manager 8.0

    Request to build iSeries agent for Sentinel Agent Manager 8.0

  • Votes

    4

    webhelper to interact with REST api from collectors and actions

    If one wants to interact with Sentinel's REST api a https connection need to be established and authenticated. This can be cumbersome from an action or collector and ...

  • Planned

    4

    notification on alert creation or owner change

    there should be an option to notify the owner if an alert is assigned.

  • Votes

    3

    Data Synchronization enhancement

    Enhance the data synchronization feature to allow the user to specify a start and finish date. Additionally, allow the user to kick-off the job on a specific date/time ...

  • Votes

    4

    Samba v2 and v3 support in file connector

    File connector should be able to use SMB v2 and v3.

  • Votes

    2

    Ability to Export\Import Routing Rules

    In some environments there may be many routing rules configured in Sentinel to do things like forward events via Sentinel link, tag events, or forward to another syslog ...

  • Votes

    3

    bintec Collector

    A collector for bintec router/VPN devices would be fine

  • Votes

    3

    Make Data Source selection permanent

    Data Source selection should be made permanent so that it is selected every time you make a search. Now it should be manually ticked every time you make a new search.

  • Votes

    8

    Sentinel Windows Agent Should Handle Rotating Application Logs

    Currently, the file connector has the capability to process rotating logs but that requires the ability to set up shares for Sentinel to access those logs remotely or ...

  • Votes

    8

    Customisation WebUI

    Like in other Soltware solutions there should be a possibility to customise the Login Page of Sentinel. There should be two things: - customize the login page with the ...

  • Votes

    6

    WTMP Agent RPM

    Worlking at Worldline in a Sentinel project. Worldline has already a Linuy based "Siem" for Linux events, that the buils on Linux scripting. Now they build a Sentinel ...

  • Votes

    3

    VMware NSX Collector for Sentinel

    There is no supported collector for VMware NSX in Sentinel. Create a collector that supports the VMware NSX platform/technology. VMware's Network virtualization ...

  • Votes

    6

    To support report for ISO 27002, year 2013.

    Current version is ISO 27002, year 2005. When sentinel can support 2013?

  • Votes

    14

    EPS level alert, monitoring and visualization

    Currently Sentinel does not have any method to monitor EPS levels properly. It would good to have some way to monitor EPS levels and have an alert if e.g. system ...

  • Votes

    10

    Postgres collector

    Have the ability to collect, store, and read postgres logs via Sentinel. Working with the military, we have a requirement to store audit and database logs in 1 location. ...