There are several methods to configure an event source. Event sources can be deployed by right-clicking on an existing Collector Manager, Collector, or Connectors.
To deploy an event source, you need the following components:
Collector Script: Collector scripts may be downloaded from Novell web site (http://support.novell.com/products/sentinel/collectors.html), copied from a previous Sentinel implementation (4.x or 5.x), or built using Collector Builder
Connector: Connector may be downloaded from Novell web site (http://support.novell.com/products/sentinel/collectors.html)
Configuration information for the event source
Collector Scripts and Connectors built by Novell can be found on the Novell web site.
To connect to the Event Sources:
Click Tools on the Menu Bar and select Connect to Event Source. Alternatively, you may also click the Connect to Event Source button on the Tool Bar. Connect to Event source window will display.
NOTE: Event Source types for which you currently have compatible Collector parsing scripts will be listed here.
Select an Event Source from the list to which you want to connect to and collect data from. You may click Add More to import an Event Source. Click Next. Select Collector Script window will display.
NOTE: You can open "Select Collector Script" screen by double clicking or dragging a selected event source from the "Event Source Palette" window.
Select a collector script from the list. You may also install additional collector scripts (click Install More Scripts) that support your Event source, if it is not listed here (For more information on installing a collector script, refer to Add Plug-in. Click Next. Select Connection Method window will display.
Select a connection method from the list. You may also install additional connectors by clicking on the Install More Connectors button. For more information, refer to Add Plug-in to install connectors. Click Next. Event Source Management window will display.
You may create a new Collector and Connector, may use an existing Collector or Connector. Select an option and click Next.
NOTE: Based on the existing Collectors and Connectors in your system that is compatible with your new Event Source, one or more of these options may be unavailable.
Create a new Collector and Connector: Select this option to create a new Collector and Connector to manage the Event Source connection.
After you select this option and click Next, Select Collector Manager window will display.
Select the Collector Manager you want to use and click Next. Configure Collector Property window will display.
Configure the parameters available and click Next. Configure Collector window will display.
Enter the name of the collector and configure the options.
Check the Run checkbox if you want to run your collector automatically.
Click Details button to see plug-in details.
You may set alerts (with repeated option) if no data is received in a specific period.
You may limit the data rate as maximum number of records per second.
You may set filter through Set Filter button.
Click Next. The Configure Connector window will display.
Enter the name of the connector and configure the options.
Check the Run checkbox if you want to run your connector automatically.
Click Details button to see plug-in details.
You may set alerts (with repeated option) if no data is received in a specific period.
You may limit the data rate as maximum number of records per second.
You may set filter through Set Filter button.
Click Next. The Event Source configuration screens will display.
Use an existing Collector: Select this option to use an existing Collector and to create a new Connector to manage the Event Source connection.
After you select this option and click Next, the Select Collector window will display.
Select the Collector you want to use and click Next. The Configure Connector window will display.
Enter the name of the connector and configure the options
Check the Run checkbox if you want to run your connector automatically.
Click Details button to see plug-in details.
You may set alerts (with repeated option) if no data is received in a specific period.
You may limit the data rate as maximum number of records per second.
You may set filter through Set Filter button.
Click Next. The Event Source configuration screens will display.
Use an Existing Connector: Select this option to use an existing Collector and an existing Connector to manage the Event Source connection.
After you select this option and click Next, The Select Connector window will display.
Select the connector you want to use and click Next.
The Records Per Second window will display.
Set the number of records to be transferred per second and click Next. The General window will display.
Enter Name of the Event Source.
Check the Run checkbox if you want to run your Event Source automatically.
Click Details button to see plug-in details.
You may set alerts (with repeated option) if no data is received in a specified time interval.
You may limit the data rate as maximum number of records per second.
You may select to trust the Event Source Time.
You may set filter through Set Filter button. In the filter window, add/edit the filters and click OK.
Click Next. The Summary window will display.
Click Test Connection to test the event source. Test Event Source window will display with "Data" and "Error" tabs. The Error tab displays the error message if there is any error in the configuration of event source.
After a few seconds, a sampling of raw data should be received from the Event Source and displayed in the "Data" tab.
Use the "Start" and "Stop" buttons to start or stop the test.
Use the "Maximum Rows" component to control the max number of raw data records to obtain at once.
You can test the event source in the Test Event Source window. It displays the data in the Data tab and errors in the Errors tab. You can select maximum rows to be displayed and can start and stop the test.
Click Finish on successful test of the Event Source.
NOTE: The Collector parsing script will be executed on the same system as the Collector Manager that you choose here.