Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

confusion abt event count

hi all i have a confusion abt the event count value for the signatures.

say if i set the event count value to 5 then the signature will fire only if the event ocours 5 times right.

does it mean that when the first time the attack packet comes the signature is not fired and the action is not taken. the signature action is taken only if it hits 5 times.

is this what it means. and will the event be written to the event store.

can someone pls clarify this doubt.

regards

sebastan

1 REPLY
Bronze

Re: confusion abt event count

Event action rules are a group of settings you configure for the event action processing component of the sensor. These rules dictate the actions the sensor performs when an event occurs

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a00803eb027.html

106
Views
0
Helpful
1
Replies
CreatePlease login to create content