We love to hear your ideas for improving Sentinel.

Page 5 
190 Ideas
183 Comments
805 Votes
  • Votes

    6

    F5 parser Event Name in clear text ...

    Hi, This Collector has been added to support High Speed logging. The collector uses log message ID numbers as Event Name. This is not clear text and clear to understand. ...

    Comments (0) | by: Timo S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    6

    Support for eStreamer via Cisco nCore client

    Cisco is in the process of releasing a client for collecting via eStreamer that is supported and maintained by them rather than asking their consumers to write custom ...

    Comments (2) | by: Brandon L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    3

    Support for RELP (Reliable Event Logging Protocol)

    One of our customer was trying to use rsyslog with Relp to securly send events to Sentinel. Since Relp seems to become a quite common it would be a good thing if Sentinel ...

    Comments (0) | by: Lennart J. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    4

    Support security features provided by SNMP v3

    Authentication in SNMP v1 and v2 is nothing but community string sent in clear text. SNMPv3 does not use community strings, but uses password based authentication and ...

    Comments (3) | by: Srinivas R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    3

    CG reports (.csv) should print events line by line without any report ...

    When the CG reports are generated, the output of the report with the selected events will be displayed in the proper report specific format. Whereas, when the events ...

    Comments (3) | by: Mahantesh H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Dashboards/Visualizations
  • Votes

    7

    VMWare vCenter logs

    vCenter makes most of it's logging available in the Windows Event log for software-based installations, and via Syslog for appliance (VCSA) installations, at least from ...

    Comments (1) | by: Brandon L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    2

    brocade collector

    Sentinel does not currently have a brocade collector plugin.

    Comments (2) | by: James H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    2

    Micro Focus should have a MS Dynamics collector +

    Micro Focus should have a collector that supports MS Dynamics in the cloud but preferrably all services that a Sentinel customer is using from MS Azure. Here's MS page ...

    Comments (0) | by: Pekka L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    1

    Salesforce collector

    Micro Focus should have a Salesforce collector. this from Salesforce describes a very typical usecase: ...

    Comments (0) | by: Pekka L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    6

    Checksum for eventdata

    Currently Sentinel creates checksum only for rawdata in secondary storage. There are some cases where checksum is needed to event data as well. -Br, TimoS

    Comments (5) | by: Timo S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    7

    CheckPoint LEA Connector missing critical pieces of information

    I've spotted some flaws on CheckPoint collector. I'm giving one example from blade "URL Filtering" in CheckPoint These fields are : appi_name, matched_category, ...

    Comments (2) | by: Pat S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    2

    Supporting Syslog TCP with Octet Counting Framing

    This framing mode is yet to have a wide acceptance. Also, the latest rsyslog does have an optional mode for this --> ...

    Comments (0) | by: Pradeep K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    4

    Syslog over TCP needs to recognize NULL characters as message ...

    Some products like Juniper Netscreen use NULL character as a Syslog message delimiter. Our Syslog connector does not treat NULL char as a delimiter and as a result, ...

    Comments (1) | by: Pradeep K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    6

    Possibility to restart individual Event source via CLI or REST API

    Background: We have severe problems with File Connector log sources and have not get solution for that yet. For some reason file reading hangs occasionaly and never ...

    Comments (0) | by: Kimmo J. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    2

    Kafka connector

    Our client has centralized data storage created on Hadoop. They are transferring data from self designed applications through Apache Kafka. It would be nice to have ...

    Comments (1) | by: Jakub M. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    1

    IBM zOS Collector

    IBM zOS mainframe collector to help parse and correlate the logs sent to sentinel. This type of collector would help translate RACF logs and Type80 send logs in CEF ...

    Comments (1) | by: David E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    5

    Update SSL Certificates

    Please either allow or build in a function to allow the update of an SSL certificate issued from either a third party CA or an internal CA for website functionality. In ...

    Comments (1) | by: David E. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    6

    File Connector - Keep file offset data stored while moving log source ...

    Now, when moving file log source from cm to another it does not store offset data. This should be fixed. -Br, TimoS

    Comments (1) | by: Timo S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    2

    Correlation Rules Firing - Scheduled Email Alerts

    The ability to have emails from correlation rule event firing to go to a different (or additional) email address during a certain time period would be invaluable. e..g ...

    Comments (1) | by: Paul R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    10

    Support for Oracle Service names instead of SID

    A company may standardize on using service names because when using Oracle RAC. The Sentinel Data Synchronization to Oracle feature is only possible by using the SID of ...

    Comments (2) | by: John G. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations