Troubleshooting Scripts

The scripts below are useful when troubleshooting an issue you are experiencing. They provide finer grain control of certain components in Sentinel, allowing you to drill down to the root cause of the issue. Starting and Stopping Sentinel Server

NOTE: These scripts should not be used during normal operation of Sentinel.

Script File:

Description:

  • collector_mgr.bat

  • collector_mgr

  • correlation_engine.bat

  • correlation_engine

  • das_aggregation.bat

  • das_aggregation

  • das_binary.bat

  • das_binary

  • das_cmd.bat

  • das_cmd

  • das_itrac.bat

  • das_itrac

  • das_query.bat

  • das_query

  • das_rt.bat

  • das_rt

Starts the associated Sentinel Server process. These scripts are useful when troubleshooting a problem with a Sentinel Server process that is not running properly and when no helpful error message is written to the log file. Before running one of these scripts, make sure the associated process is not already running on that machine.

  • event_file_info.bat

  • event_file_info

Displays information about an event file that will be processed by DAS Aggregation.

  • list_broker_connections.bat

  • list_broker_connections

Displays all of the active connections to the iSCALE message bus.

  • runalert.bat

  • runalert.sh

  • runattack.bat

  • runattack.sh

Starts the Internet download and processing of either the alert or attack Advisor feed data. The advisor.bat/.sh script will run both of these scripts during normal operation.

  • setadvenv.bat

  • setadvenv.sh

Used by the Advisor scripts to set some local environment variables.

  • setenv.sh

Used by many of the Sentinel script to set some local environment variables.

  • start_broker.bat

  • start_broker.sh

Starts the message bus component of the Communication Server. This script is useful if you are having problems starting the message bus (Sonic). For more information, refer to Starting the Communication Server in Console Mode.

  • StartSQLAgent.bat

Starts the SQL Server Agent Service and configures it to run automatically. This script is run automatically by the installer.

  • stop_broker.bat

  • stop_broker.sh

Stops the message bus component of the Communication Server. For more information, refer to Stopping the Communication Server in Console Mode.

  • stop_container.bat

  • stop_container.sh

Stops a particular Sentinel Server process. This is useful when you need to restart a particular Sentinel Server process without stopping the entire Sentinel Server. Please note that the Sentinel Server watchdog will automatically restart the process once it is stopped.. For more information, refer to Restarting Sentinel Containers.

  • uninstallAt.bat

  • uninstallcron.sh

Removes the Advisor feed download and processing scheduled jobs. This script is run automatically by the uninstaller.