Mars 4.3 email alerts

Unanswered Question
Sep 4th, 2008

We have been able to tune our clients Mar appliance successfully. He now wants to receive email alerts when any alarms are triggered. Is it possible to configure this as a global type setting to apply to all rules or do I have to edit every single rule individually to achieve this?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
mhellman Fri, 09/05/2008 - 05:39

You have to edit every rule. There might be some alternatives. One might be to create an hourly report of type "matched rule ranking" that has the "use only firing events" setting. This will give you a summary of the rules that fired in that hour. Obviously, it's not as "real-time" as changing the action for every rule. There are only ~130 inspection rules, so manually changing them shouldn't be a big deal either.

Actions

This Discussion