Sentinel - and its sister product Identity Audit - provides event collection (audit events, log data, and so forth), event enrichment, and event analysis/reporting. Sentinel is a full-fledged Security Information and Event Management (SIEM) product, while Identity Audit is intended as a local site or feature-limited event collection product that serves other Novell applications.
Both products can incorporate plug-ins that extend the functionality of the core product and provide additional system integration, solution-based content, and other new features.
The SDK provides a development and build environment for Sentinel and Identity Audit plug-ins. The goal is to make plug-in development and customization available to most customers and partners. Extensive documentation is provided to assist in understanding the features and concepts necessary to build useful, effective plug-ins that will extend the base functionality.
The SDK provides the following features:
© 2009 Novell, Inc. All Rights Reserved.