18.2 Enabling Event Visualization

To enable event visualization:

  1. Log in to the Sentinel server as the novell user.

  2. Open the <sentinel_installation_path>/etc/opt/novell/sentinel/config/configuration.properties file.

    NOTE:In case, any issue is observed then follow the steps given in the Issue during Restart of Sentinel Server after Enabling or Disabling Event Visualization section.

  3. (Conditional) If you are using Sentinel in High Availability (HA) mode, ensure that the sentinel.ha.cluster property is set to true for all the nodes on the cluster.

  4. Set the eventvisualization.traditionalstorage.enabled to true.

  5. Restart the Sentinel server.

    rcsentinel restart

  6. (Optional) Event visualization dashboards display only the events processed after you enabled event visualization. To view existing events present in file-based storage, you must migrate data from file-based storage to Elasticsearch. For more information, see Section 35.0, Migrating Data to Elasticsearch.

NOTE:Enabling or disabling event visualization generates an exception, as it restarts Sentinel indexing services. This exception is expected and you can ignore this exception.