Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

MARS Incident Severity

Hi,

How does MARS define or calculate Incident Severity?

-Low (green)

-medium (yellow)

-high (red)

is it the same as IPS Risk rating?

Thanks in advance.

cash

1 REPLY
New Member

Re: MARS Incident Severity

Hi,

it seems that the severity of a particular incident is derived form the severities of the fired events that lead to the incident (due to matching in a rule).

the pre-defined events have already pre-defined severities (Management -> Event Management). They can not be edited.

If you are defining Custom Events you can set the severity to the level you like.

hope this helps,

br

240
Views
4
Helpful
1
Replies
CreatePlease to create content