NOTE: To use this feature, you must have the user permission Menu Configuration.
Use the Menu Configuration window to create the menu items that appear on the Event menu, which is available by right-click when a single event is selected in any table displaying an event (for example, an Active View window, Snapshot window, Incidents Events window, or Offline Query window). Sentinel has the following default Menu Configuration items that you can clone, activate or deactivate:
Ping: Ping the destination IP of the selected event
nslookup: Perform an nslookup on the Source IP of the selected event
traceroute (tracert on Microsoft SQL 2005): Perform a traceroute from the Source IP of the selected event to the Sentinel Server
Whois?: Perform an ARIN Whois? lookup on the Source IP of the selected event
To view the configuration details for any of these options, select the item and click Details. The following is the nslookup configuration.
In addition, new options can be customized to execute a command or open a web browser.
NOTE: The scripts, commands, or applications must be available in $ESEC_HOME/config/exec (on UNIX) or %ESEC_HOME%\config\exec (on Windows). Symbolic links are not supported on UNIX.
Menu Configuration allows you to: