Environment
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows 2000 Server
RedHat Linux
Solaris
Situation
What is Query Manager Process (query_manager)?
Resolution
The query manager (query_manager) process receives quick query and
drill down requests from Sentinel Console and forwards them to the
database through DAS.
The requests from Sentinel Console define the events needed a filter. If a filter is used, the Query Manager retrieves the filter definition and converts the filter to an xml criterion. Query Manager then sends the request to DAS. Not all filters can be completely converted to queries that can be processed by the database. If the filter is fully converted, the Query Manager instructs DAS to send the reply directly to the Sentinel Console. If the filter contains regular expressions that cannot be converted to SQL the query manager converts what it can and generates a conservative criterion that returns a superset of the required events. In that case, Query Manager instructs DAS to return the result to the Query Manager. When the reply comes back to the Query Manager it filters it in memory and sends those events that pass the filter to the Sentinel Console.
The requests from Sentinel Console define the events needed a filter. If a filter is used, the Query Manager retrieves the filter definition and converts the filter to an xml criterion. Query Manager then sends the request to DAS. Not all filters can be completely converted to queries that can be processed by the database. If the filter is fully converted, the Query Manager instructs DAS to send the reply directly to the Sentinel Console. If the filter contains regular expressions that cannot be converted to SQL the query manager converts what it can and generates a conservative criterion that returns a superset of the required events. In that case, Query Manager instructs DAS to return the result to the Query Manager. When the reply comes back to the Query Manager it filters it in memory and sends those events that pass the filter to the Sentinel Console.