The same general procedure is used to add all types of Sentinel content to a Solution Pack. The Sentinel content options include the following:
Correlation rule deployments, including their deployment status (enabled or disabled) and associated correlation rules, correlation actions, and dynamic lists
Reports
iTRAC workflows, including associated roles
Event enrichment, including map definitions and event meta tag configuration
Other associated files added when the Solution Pack is created, such as documentation, example report PDFs, or sample map files.
The general steps for Sentinel content are described below.
NOTE:Because dynamic list elements and map data are often highly dependent on the system environment, this data is not included as part of the dynamic list or map definition in the Solution Pack. However, this data can be attached to the Solution Pack as a .csv file.
To add Sentinel content to a control:
Log into Solution Designer in connected mode.
Open or create a Solution Pack.
Click the appropriate panel to display the available reports from the Content Palette: Solution Pack, category, control, content group and contents.
Select the specific content group you want to add.
Select the appropriate control or placeholder and click Add Selected Content. Alternatively, drag and drop the selected content group to the appropriate control or placeholder in the Solution Pack frame.
NOTE:If you try to add preexisting content in Solution Designer by dragging and dropping, the existing content is highlighted. After you drop the content, a message prompt displays, stating existence of similar content.
For trademark and copyright information, see Legal Notices.