Environment
NetIQ Sentinel 6 Sentinel Server
Situation
Where are the Sentinel log files and which components do they relate to?
Resolution
- Default ESEC_HOME directories
- Windows: %ESEC_HOME% = C:\Program Files\Novell\Sentinel6
- Unix: $ESEC_HOME = /opt/novell/sentinel6
- Activities executed using Sentinel Data Manager for the specific client running on that machine
- Windows: %ESEC_HOME%\log\SDM0.*.log
- Unix: $ESEC_HOME/log/SDM0.*.log
- iTRAC
- Windows: %ESEC_HOME%\log\das_itrac0.*.log
%ESEC_HOME%\log\itrac_engine.log - Unix: $ESEC_HOME/log/das_itrac0.*.log
$ESEC_HOME/log/itrac_engine.log - Advisor data download and process
- Windows: %ESEC_HOME%\log\advisor_script.log
%ESEC_HOME%\log\advisor0.*.log - Unix: $ESEC_HOME/log/advisor_script.log
$ESEC_HOME/log/advisor0.*.log - Event insertion into the database
- Windows: %ESEC_HOME%\log\das_binary0.*.log
- Unix: $ESEC_HOME/log/das_binary0.*.log
- Database queries, Collector, Collector Manager health, identity insertion, and all other DAS activities not performed by other DAS components
- Windows: %ESEC_HOME%\log\das_query0.*.log
- Unix: $ESEC_HOME/log/das_query0.*.log
- Active Views
- Windows: %ESEC_HOME%\log\das_rt0.*.log
- Unix: $ESEC_HOME/log/das_rt0.*.log
- Aggregation
- Windows: %ESEC_HOME%\log\das_aggregation0.*.log
- Unix: $ESEC_HOME/log/das_aggregation0.*.log
- Wrapper (NOTE: sentinel_wrapper.log is for the service wrapper)
- Windows: %ESEC_HOME%\log\sentinel0.*.log
%ESEC_HOME%\log\sentinel_wrapper.log - Unix: $ESEC_HOME/log/sentinel0.*.log
$ESEC_HOME/log/sentinel_wrapper.log - Collector Manager
- Windows: %ESEC_HOME%\log\collector_mgr0.*.log
- Unix: $ESEC_HOME/log/collector_mgr0.*.log
- Correlation Engine
- Windows: %ESEC_HOME%\log\correlation_engine0.*.log
- Unix: $ESEC_HOME/log/correlation_engine0.*.log
- Sentinel Control Center
- Windows: %ESEC_HOME%\log\control_center0.*.log
- Unix: $ESEC_HOME/log/control_center0.*.log
- Proxy Communication
- Windows: %ESEC_HOME%\log\das_proxy0.*.log
- Unix: $ESEC_HOME/log/das_proxy0.*.log
- Solution Designer
- Windows: %ESEC_HOME%\log\solution_designer0.*.log
- Unix: $ESEC_HOME/log/solution_designer0.*.log
Additional Information
For further information, refer to the documentation: https://www.netiq.com/documentation/sentinel61/