OpenText Sentinel Community

Solution Designer - Bulk Copy

BryanW

Need a method to capture all custom content in single click. Currently have to copy one item at a time. Group by group. Very time consuming. Option A: Ctrl/Shift+Left Click to highlight multiple items for copy. Option B: Custom Folders within each category…
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Export configuration in clear text

MigrationDeletedUser

Customer HELAB need a tool to export the complete configuration in clear text or pdf to have a documentation of their system. This is needed because of regulation requirements. In Solution Manager you can create a solution pack, containing the complete…
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Extend windows event logs possibilities in SAM

MigrationDeletedUser

It could be interesting to extend windows logs (currently limited to secuity ad system logs) to others services/software like sysmon logs; powershell logs, RDP logs in SAM...
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Event Export Filters

Rehtael

When exporting the Events from a Search query, there is only "Select All"/"Clear All". More often than not, a user would export the same fields for queries they run which can be very cumbersome with the current options. Having a way to remember selected…
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Improve NoDataAlert

rochfo

Is there a way to improve this event? Currently it gets logged as a generic 'Internal' event and all of the data is in the message field with none of it parsed out. Example: "No data received for EventSource x.x.x/ WMS (ID XXXX-XXXXX-XXXXX) for last 0…
- over 5 years ago
- OpenText Sentinel
- Sentinel Ideas
Ability to recreate an empty database (Postgres, mongo)

Erno

Normally running the 'backup_util.sh' is the part of the daily routine to make a backup about the required components (mainly the config, SI, alerts, etc...) In a case of a problem we can restore the data with the same script from the previous backup…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Customer needs Microsoft Radius data to be parsed correctly.

HenkT28

A customer has Microsoft Radius server and they need to be able to search on the mac address. Unfortunately all other systems use a format like this: 00:AA:00:12:34:56, whereas Microsoft radius logs 00-AA-00-12-34-56. The customer used WMI connector.…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Agent Manager Agent shoud send Heartbeat Events to detekt that it is up and running

MigrationDeletedUser

There should be a possiblity to detect that an Agent Manager Agent is running independent from sending events to Sentinel. I think one possibilty would be to have a configurable option to force the Agent Manager Agent to send a heartbeat event to Sentinel…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Distributed search for All Identity Tracking Reports

Khris Francisco

All Identity Tracking Reports (Account Tracking, Recent Activity, Password changes, Suspicious activity overview ) have hardcoded Database in the selection of data source of Report UI and will not work with federated data from the distributed sentinel…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Detect anomaly's in user logon activity

jgassner

The ability to detect anomaly's in user logon activity, ie logging on to a system they have never used before.
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Provide end user with alertable event when Agent Manager Central Computer shuts down

brandon-langley

Ideally, we want the server to send a last message to the back-end when the Central Computer shuts down, but alternatively maybe there needs to be a 'are you alive' check from the Sentinel Core system to ensure that Central Computers are alive and running…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Request for incremental backup options in the backup script for Sentinel

brandon-langley

Provide the backup script the ability to create an differential (incremental) update of the backup since time the last backup was performed. This reduces the time and cost of running the backup script.
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
file connector

MigrationDeletedUser

In Event Source Management, when processing a file with the file connector, once processing begins under connection information, it states "Reading file..." this is good information to know, but feedback is needed once the file has actually been read…
- over 6 years ago
- OpenText Sentinel
- Sentinel Ideas
Checksum for eventdata

MigrationDeletedUser

Currently Sentinel creates checksum only for rawdata in secondary storage. There are some cases where checksum is needed to event data as well. -Br, TimoS
- over 7 years ago
- OpenText Sentinel
- Sentinel Ideas
Supporting Syslog TCP with Octet Counting Framing

MigrationDeletedUser

This framing mode is yet to have a wide acceptance. Also, the latest rsyslog does have an optional mode for this --> http://www.rsyslog.com/doc/v8-stable/configuration/modules/omfwd.html# Do you think Sentinel should support Octet counting framing?
- over 7 years ago
- OpenText Sentinel
- Sentinel Ideas
General users should be able to view Health Status Info

MigrationDeletedUser

General users should be able to view but not edit or modify the following collection - Overview & Event sources Storage - Health, report jobs, search jobs When creating roles, you should be able to select these panels as an option to grant access to monitor…
- over 7 years ago
- OpenText Sentinel
- Sentinel Ideas
Support Wildcarding In Dynamic Lists

jgassner

Dynamic Filters should allow the same CIDR notation and wildcarding that Lucene allows specifically for IP addresses. Should also allow ranges like 10.14.1.[1-50]
- over 7 years ago
- OpenText Sentinel
- Sentinel Ideas
notification on alert creation or owner change

Norbert Klasen

there should be an option to notify the owner if an alert is assigned.
- over 7 years ago
- OpenText Sentinel
- Sentinel Ideas
Data Synchronization enhancement

MigrationDeletedUser

Enhance the data synchronization feature to allow the user to specify a start and finish date. Additionally, allow the user to kick-off the job on a specific date/time (say every Sunday night).
- over 7 years ago
- OpenText Sentinel
- Sentinel Ideas
To support report for ISO 27002, year 2013.

fteo1

Current version is ISO 27002, year 2005. When sentinel can support 2013?
- over 7 years ago
- OpenText Sentinel
- Sentinel Ideas
EPS level alert, monitoring and visualization

MigrationDeletedUser

Currently Sentinel does not have any method to monitor EPS levels properly. It would good to have some way to monitor EPS levels and have an alert if e.g. system currently uses >90% of EPS licensing (this could be e.g. a manually entered value). I know…
- over 7 years ago
- OpenText Sentinel
- Sentinel Ideas
Use Email lists in correlation events

jarivaahtera

If you have multiple recipients for correlation event alarms, you have to create from CC's action manager an action for each recipient or add multiple addresses to the action. Then when you want to verify later which correlation event sends email to which…
- over 7 years ago
- OpenText Sentinel
- Sentinel Ideas
Search results sorting

MigrationDeletedUser

Currenty search results are sorted descending according to Event Time. But when two same events have the Event Time parameter same, the order of these events is wrong. This is common for correlated events. Search results with them looks like the correlation…
- over 7 years ago
- OpenText Sentinel
- Sentinel Ideas
CM backup

MigrationDeletedUser

Customers are asking why we do not have official backup/restore script or other CLI method to export/import CM configuration.
- over 8 years ago
- OpenText Sentinel
- Sentinel Ideas
Run correlation rules on history data

MigrationDeletedUser

It would be nice to have the ability to run correlation rule againt history data and let the rule fire alerts. Now it is only possible to test the rule, but not to have the rules run agains all the historic data. Running on the stored data will provide…
- over 8 years ago
- OpenText Sentinel
- Sentinel Ideas

Menu

OpenText Sentinel

Solution Designer - Bulk Copy

Export configuration in clear text

Extend windows event logs possibilities in SAM

Event Export Filters

Improve NoDataAlert

Ability to recreate an empty database (Postgres, mongo)

Customer needs Microsoft Radius data to be parsed correctly.

Agent Manager Agent shoud send Heartbeat Events to detekt that it is up and running

Distributed search for All Identity Tracking Reports

Detect anomaly's in user logon activity

Provide end user with alertable event when Agent Manager Central Computer shuts down

Request for incremental backup options in the backup script for Sentinel

file connector

Checksum for eventdata

Supporting Syslog TCP with Octet Counting Framing

General users should be able to view Health Status Info

Support Wildcarding In Dynamic Lists

notification on alert creation or owner change

Data Synchronization enhancement

To support report for ISO 27002, year 2013.

EPS level alert, monitoring and visualization

Use Email lists in correlation events

Search results sorting

CM backup

Run correlation rules on history data

Resources

Menu

Popular Tags

Resources