Sentinel: Changing the number of incidents displayed in Real-Time Active View

  • 3066571
  • 14-Aug-2006
  • 26-Apr-2012

Environment

Microsoft Windows Server 2003 Standard Edition
Microsoft Windows 2000 Server
RedHat Linux
Solaris 9

Situation

How do I change the number of incidents to be displayed?

Resolution

By default, the maximum number of incidents to be displayed in Active View is 100. This number can be changed in the SentinelPreferences.properties file. If there is a need to increase this number, it is recommended that the setting should be around 150 to 200, as the system resources are strained when it starts pulling that much data. Resources can also be minimized using the View filter.

File:
$ESEC_HOME/sentinel/console/SentinelPreferences.properties

Option:
com.eSecurity.Sentinel.incidents.maxIncidentsDisplayed=100

After the change, the file needs to be saved and the console needs to be restarted.