Event Source Management 193novdocx (en) 7 January 201010.4.1 Component Status IndicatorsIndicators are used to represent various states as follows:Table 10-5 Component Status IndicatorsTo set Attribute filter for displaying components:1 In Sentinel Control Center, click the Event Source Management in the menu bar and select LiveView or Scratch Pad.2 Click the Attribute Filter frame.3 Specify the Search and Limit to criteria.4 Check Running and/or Stopped checkbox to specify the status of the components.To hide components based on type:1 In Sentinel Control Center, click the Event Source Management in the menu bar and select LiveView or Scratch Pad.2 Click Attribute Filter frame.Event Source The Event Source represents the actual source of datafor Sentinel. Unlike other components this is not aplugin, but is a container for meta-data, includingruntime configuration, about the event source. In somecases a single Event Source could represent many realsources of event data, for example if multiple devicesare writing to a single file.Stopped Indicates that the component is stopped.Running Indicates that the component is running.Warning Indicates that a warning is associated with the component.At this time, this warning indicator is primarily used to showwhen the configured state and actual state of a componentdiffer. (that is, a component is configured to be running, butthe actual state of the component is stopped.)Error Indicates that an error is associated with the component.See the individual component’s status display for detailsabout the error.Reporter Time is Skewed Indicates when the time of a component differs from themain server’s time. (The difference is greater than apredefined time threshold.)Debug Indicates that the component is in Debug mode. Only aCollector can be in Debug mode.Unknown This indicator is displayed when the status of the object inthe ESM panel is not yet known.
