Sentinel 6.x Log Locations

  • 7010878
  • 05-Oct-2012
  • 05-Oct-2012

Environment

NetIQ Sentinel 6 Sentinel Server

Situation

Where are the Sentinel log files and which components do they relate to?

Resolution

  • Default ESEC_HOME directories
    • Windows:  %ESEC_HOME% = C:\Program Files\Novell\Sentinel6
    • Unix:     $ESEC_HOME  = /opt/novell/sentinel6
  • Activities executed using Sentinel Data Manager for the specific client running on that machine
    • Windows:  %ESEC_HOME%\log\SDM0.*.log
    • Unix:     $ESEC_HOME/log/SDM0.*.log
  • iTRAC
    • Windows:  %ESEC_HOME%\log\das_itrac0.*.log
                %ESEC_HOME%\log\itrac_engine.log
    • Unix:     $ESEC_HOME/log/das_itrac0.*.log
                $ESEC_HOME/log/itrac_engine.log
  • Advisor data download and process
    • Windows:  %ESEC_HOME%\log\advisor_script.log
                %ESEC_HOME%\log\advisor0.*.log
    • Unix:     $ESEC_HOME/log/advisor_script.log
                $ESEC_HOME/log/advisor0.*.log
  • Event insertion into the database
    • Windows:  %ESEC_HOME%\log\das_binary0.*.log
    • Unix:     $ESEC_HOME/log/das_binary0.*.log
  • Database queries, Collector, Collector Manager health, identity insertion, and all other DAS activities not performed by other DAS components
    • Windows:  %ESEC_HOME%\log\das_query0.*.log
    • Unix:     $ESEC_HOME/log/das_query0.*.log
  • Active Views
    • Windows:  %ESEC_HOME%\log\das_rt0.*.log
    • Unix:     $ESEC_HOME/log/das_rt0.*.log
  • Aggregation
    • Windows:  %ESEC_HOME%\log\das_aggregation0.*.log
    • Unix:     $ESEC_HOME/log/das_aggregation0.*.log
  • Wrapper (NOTE: sentinel_wrapper.log is for the service wrapper)
    • Windows:  %ESEC_HOME%\log\sentinel0.*.log
                %ESEC_HOME%\log\sentinel_wrapper.log
    • Unix:     $ESEC_HOME/log/sentinel0.*.log
                $ESEC_HOME/log/sentinel_wrapper.log
  • Collector Manager
    • Windows:  %ESEC_HOME%\log\collector_mgr0.*.log
    • Unix:     $ESEC_HOME/log/collector_mgr0.*.log
  • Correlation Engine
    • Windows:  %ESEC_HOME%\log\correlation_engine0.*.log
    • Unix:     $ESEC_HOME/log/correlation_engine0.*.log
  • Sentinel Control Center
    • Windows:  %ESEC_HOME%\log\control_center0.*.log
    • Unix:     $ESEC_HOME/log/control_center0.*.log
  • Proxy Communication
    • Windows:  %ESEC_HOME%\log\das_proxy0.*.log
    • Unix:     $ESEC_HOME/log/das_proxy0.*.log
  • Solution Designer
    • Windows:  %ESEC_HOME%\log\solution_designer0.*.log
    • Unix:     $ESEC_HOME/log/solution_designer0.*.log
The naming convention for the log files is that they include with the name of the process, the instance number (almost always 0 unless there are multiple instances of das_binary installed), and the log number in the log rotation sequence.

Additional Information

For further information, refer to the documentation:  https://www.netiq.com/documentation/sentinel61/