How do I find out the number of events in my Sentinel RD database?

  • 7004349
  • 01-Sep-2009
  • 26-Apr-2012

Environment

Novell Sentinel 6.1 RD

Situation

There are many ways to query the database including the built in SQL command line utility located at;

/opt/novell/sentinel6_rd_x86-64/3rdparty/postgresql/bin

Other options for accessing the database include open source SQL clients such as 'Squirrel sql', DBVisualizer, etc... Most of these clients are free and support jdbc connectors for access to most databases including postgres, oracle, mssql, mysql, db2, etc... These programs are java based and run on most platforms including linux.


Resolution

To access the database and determine the number of events using psql command line, follow these steps.

1: You must verify the LD_LIBRARY_PATH is set correctly. You can do this by executing the following command;

export LD_LIBRARY_PATH=/opt/novell/sentinel6_rd_x86-64/3rdparty/postgresql/lib/:$LD_LIBRARY_PATH
2: verify the path is set by issuing the following;

echo $LD_LIBRARY_PATH

3: Login using the psql command line;

./psql -d SIEM -U dbauser

4: when prompted enter the password for your dbauser.

5: execute the following query;

select count(event_id) from events_rpt_v3;

This query will return the number of events based off the event_id in the view specified. As an example this is the count from a lab machine;

SIEM=# select count(event_id) from events_rpt_v3;
 count
-------
  9401
(1 row)