Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Mars 4.3 email alerts

We have been able to tune our clients Mar appliance successfully. He now wants to receive email alerts when any alarms are triggered. Is it possible to configure this as a global type setting to apply to all rules or do I have to edit every single rule individually to achieve this?

1 REPLY
Gold

Re: Mars 4.3 email alerts

You have to edit every rule. There might be some alternatives. One might be to create an hourly report of type "matched rule ranking" that has the "use only firing events" setting. This will give you a summary of the rules that fired in that hour. Obviously, it's not as "real-time" as changing the action for every rule. There are only ~130 inspection rules, so manually changing them shouldn't be a big deal either.

96
Views
0
Helpful
1
Replies
CreatePlease to create content