OpenText Sentinel Community

kubernates or openshit support

wencheng

kubernetes now more company use it to deploy container for key Application/Web Whether we could get a collector for these container system to manage their log well. Thanks! Wencheng
- over 1 year ago
- OpenText Sentinel
- Sentinel Ideas
Allow managing alerts from centralized UI

Mikko Toivola

Would be great if alert management could be done from centralized UI. Now alerts can be fetched from differentc Sentinel instances (=data sources), but nothing can be done to the alerts there.
- over 2 years ago
- OpenText Sentinel
- Sentinel Ideas
allow pasting of passwords

Norbert Klasen

Sentinel disallows pasting into password fields. This is a bad security practice and in conflict with NIST Digital Identity Guidelines and other recommendations: https://pages.nist.gov/800-63-3/sp800-63b.html 5.1.1.2 Memorized Secret Verifiers Verifiers…
- over 2 years ago
- OpenText Sentinel
- Sentinel Ideas
Proxy Setting in Sentinel

MigrationDeletedUser

There is no "offical" proxy setting in Sentinel. There should be a configuration option in the GUI to setup Sentinel to use a Proxy also with user/password and this settings should be saved in an encrypted file. The way it's done at the moment is a configuration…
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Configuring Sentinel Web Console Settings From Red Hat/RestAPI

MigrationDeletedUser

Please provide the means to automate or configure the following Sentinel Web Console settings via Red Hat or RestAPI: -Secondary Storage location -Primary Storage Utilization -Alerts Retention -Control Center configuration of Integrator Managers, Action…
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Central Computer Temporary Storage Max

BryanW

Increase maximum from 500 MB (500000 KB) to something much larger
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Make correlation event retention length configurable separately from data event retention

MigrationDeletedUser

Provide the means to configure correlation event retention to a different period than data event retention in order to prevent the PostgreSQL from growing too large.
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Option to Stopp Collector and delete all incoming Events

MigrationDeletedUser

When a collector ist stopped the incoming events are stored (PageFiles) and a filesystem can be filled with this files. So an second option would be very usefull: The second option would be, that the collector ist stopped and all incoming events for this…
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
User Inactivity Timeout

BryanW

Need User Inactivity Timeout option. Session timeout exists but will kill session while user is actively working. GUI 'Security' section preferred.
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Disable User - Improved

BryanW

Current Process: Edit User Disable user account Save ERROR Save user failed ERROR Passwords don't match *Have to set password just to disable. Why? Proposed Process 1: Edit User Disable user account Save Proposed Process 2: Highlight User Disable user…
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Limit concurrent user sessions

BryanW

Need option to limit concurrent user sessions in Sentinel Client Request
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Adding comments/notes to an Event Routing Rule

Erno

Our customer would like to add note (or comment) to an Event Routing Rule, but currently it is not possible. Please, add this new field to Sentinel
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Sentinel does not provide an explicit logout message

hoalu1

Please provide the following enhancement to the NetIQ Sentinel web interface: An explicit logout message indicating that the authenticated communications session has been reliably terminated. Per STIG Vulnerability ID V-57405, the application server management…
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Read only user

MigrationDeletedUser

There should be a posibility to create a read omly user in Sentinel. This is important for Auditors to check the system. This user should have the rights to see everyting, but should not be allowed to change anything.
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Tenant based roles to allow to run remote searches or manage correlation

_pg

Customer reported that they are planning to deploy a multi tenant Sentinel system. They would like to use multi-tier architecture, where they have multiple Sentinel for Log Management servers for storing events and one Sentinel Enterprise Server, from…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Prevent transmission of report/e-mail when the report is blank

MigrationDeletedUser

We need option to prevent the transmission of e-mail alert when the scheduled report generated is blank in reporting module
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Send full message field when fired by Correlation Rules

N044262

Correlation Rules: Actions -> Send Email (Full Customization of all fields) Normally, the message field is not recommended to be used with Correlation Rules due to the fact that processing this would require heavy processor usage but there are situations…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Correlation dropped error reporter

jarivaahtera

It should be configurable per event source if you want it to alert if the events don't come to Sentinel in the correct time window. At the moment the system writes these logs to server0.0.log file: SEVERE|TimerThreadPool pool|esecurity.ccs.comp.correlation…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Configure connection when cloning event source

MigrationDeletedUser

When cloning an event source, it will keep the connection to the source server, which is useless. When we create a template event source, which we would like to apply to hundreds of other servers, this is just not possible.
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Import event sources

MigrationDeletedUser

We have more than 200 servers which need to be created in multiple collectors. It would be great to import them via a CSV.
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Need some more granularity for user permissions

Erno

There are some features/functions, which only accessible for "super-users", e.g. creating/maintaining Actions, configuring Storage, etc... Our main issue currently, how customer's SOC team can create/maintain Actions without assigning them to the super…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
it could be interesting for performance pupose to deactivate graphical view in event source management

david_auquiere

when the number of nodes is too high, the graphical view can take time before automatic deactivation (once there are more than 5000 nodes, the graph view will automatically be disabled). it could be interesting to deactivate graphical view and only show…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Customize the search result fields

AL Kammer

Search result display a set of attributes ie sn: sip: , this can be expanded upon by selecting the more option and you can view all the results by selecting the All options. It would be good to be able to customize what attributes are displayed in the…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Sentinel should have the capailty to add a tag within the agent manager sentinel GUI

MigrationDeletedUser

Sentinel should have the capability to add a tag to devices and groups within the agent manager sentinel GUI Currently you can only add a tag in event sources. It would be beneficial if you can add a tag under the windows agent manager integration tab…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Possibility to restart individual Event source via CLI or REST API

jeromaa

Background: We have severe problems with File Connector log sources and have not get solution for that yet. For some reason file reading hangs occasionaly and never recover from it automatically. Request: So for a work around for this problem could be…
- over 7 years ago
- OpenText Sentinel
- Sentinel Ideas

Menu

OpenText Sentinel

kubernates or openshit support

Allow managing alerts from centralized UI

allow pasting of passwords

Proxy Setting in Sentinel

Configuring Sentinel Web Console Settings From Red Hat/RestAPI

Central Computer Temporary Storage Max

Make correlation event retention length configurable separately from data event retention

Option to Stopp Collector and delete all incoming Events

User Inactivity Timeout

Disable User - Improved

Limit concurrent user sessions

Adding comments/notes to an Event Routing Rule

Sentinel does not provide an explicit logout message

Read only user

Tenant based roles to allow to run remote searches or manage correlation

Prevent transmission of report/e-mail when the report is blank

Send full message field when fired by Correlation Rules

Correlation dropped error reporter

Configure connection when cloning event source

Import event sources

Need some more granularity for user permissions

it could be interesting for performance pupose to deactivate graphical view in event source management

Customize the search result fields

Sentinel should have the capailty to add a tag within the agent manager sentinel GUI

Possibility to restart individual Event source via CLI or REST API

Resources

Menu

Popular Tags

Resources