Partitions Tab

The Sentinel database is partitioned by time to simplify maintenance and improve the performance of the database. The Partitions tab in the SDM allows users to view and manage database partitions for the tables that hold event data, correlated event data, and summary data.

To view partitions in the GUI:

  1. Click the Partitions tab.

  2. In the drop-down list, select the table you want to see.

The SDM displays the partitions of the currently selected database table.

Each row in the Segments table displays the related database table, time range, status and the name of the partition.

The status of each of the partitions shown in the stegments table has one of the following states:

Table 1 Partition States

Status

Description

Online

Partition with data that is available for access

Online Current

Partition to which events are currently being inserted

Online Archived

Partition with data that has been archived but is still accessible because the partition has not been dropped

Offline Archived

Partition with data that has been archived and then dropped from the database

Online Archived Imported

Partition with data that has been archived, dropped from the database, and then re-imported into the database

NOTE:If you delete a partition without archiving it, it is deleted from the partition list in the GUI.

Figure 1 Sentinel Data Manager

At the bottom of the Partitions page, there are several smaller tabs that allow the user to perform the following operations:

Many of these operations can be executed automatically in the database by using stored procedures, but this page allows the administrator to perform these tasks manually.

To manage partitions:

  1. Click the Partitions tab.

  2. Select the table in the drop-down list.

    Sentinel partitioned tables are organized into two groups. One is the EVENTS table group, which includes EVENTS and CORRELATED_EVENTS; the other is the summary table group, which includes all summary, or aggregate, tables. If any one of the tables in the group is selected, the changes apply to all the tables in the group.

  3. At the bottom of the window, select the tab that relates to the operation that you want to perform : Add, Delete, Archive, Import, or Release.

To add partitions

  1. Select the Add partitions tab.

  2. Specify the number of days to use for adding the partitions.

    You can specify the number of partitions in Partition Configuration in the SDM GUI.

  3. Click Add.

To delete partitions:

  1. Select the Delete partitions tab.

  2. Specify the number of days after which older partitions will be deleted.

  3. Click Delete.

To import partitions:

  1. Select the Import partitions tab.

  2. Select the partition in the Segment table into which the data will be imported.

    You can specify the input directory in the Archive Destination field in the Partition Configuration tab in the SDM GUI.

  3. Click Import.

To release imported partitions:

  1. Select the Release partitions tab.

  2. In the Segment table, select the partitions that need to be released.

  3. Click Release.

For trademark and copyright information, see Legal Notices.