The Sentinel database is partitioned by time to simplify maintenance and improve the performance of the database. The
tab in the SDM allows users to view and manage database partitions for the tables that hold event data, correlated event data, and summary data.To view partitions in the GUI:
Click the
tab.In the drop-down list, select the table you want to see.
The SDM displays the partitions of the currently selected database table.
Each row in the Segments table displays the related database table, time range, status and the name of the partition.
The status of each of the partitions shown in the stegments table has one of the following states:
Table 1 Partition States
NOTE:If you delete a partition without archiving it, it is deleted from the partition list in the GUI.
Figure 1 Sentinel Data Manager
At the bottom of the Partitions page, there are several smaller tabs that allow the user to perform the following operations:
Add empty partitions to the database
Delete partitions from the database
Archive data from partitions to flat files in a specified, preexisting directory
Import partitions
Drop partitions
Many of these operations can be executed automatically in the database by using stored procedures, but this page allows the administrator to perform these tasks manually.
To manage partitions:
Click the
tab.Select the table in the drop-down list.
Sentinel partitioned tables are organized into two groups. One is the EVENTS table group, which includes EVENTS and CORRELATED_EVENTS; the other is the summary table group, which includes all summary, or aggregate, tables. If any one of the tables in the group is selected, the changes apply to all the tables in the group.
At the bottom of the window, select the tab that relates to the operation that you want to perform :
, , , or .To add partitions
Select the
partitions tab.Specify the number of days to use for adding the partitions.
You can specify the number of partitions in
in the SDM GUI.Click
.To delete partitions:
Select the
tab.Specify the number of days after which older partitions will be deleted.
Click
.To import partitions:
Select the
tab.Select the partition in the Segment table into which the data will be imported.
You can specify the input directory in the
field in the tab in the SDM GUI.Click
.To release imported partitions:
Select the
tab.In the Segment table, select the partitions that need to be released.
Click
.For trademark and copyright information, see Legal Notices.