Change Auditor 7.4 - User Guide


	NOTE: The right-click commands available for enabling/disabling alert notifications are available when multiple search definitions are selected. However, you can only enable/disable alert notifications using the Alert tab when a single search definition is selected.

Open the Searches page.

Expand the Private and Shared folders in the explorer view to locate the alert-enabled search to be disabled. Select the alert from the Search list box in the right-hand pane.

Use one of the following methods to disable an alert:

•

Right-click the alert and select Alert | Disable Alert. A message box is displayed asking you to confirm that you want to disable the alert. Click Yes.

•

Open the Alert tab, clear the Alert Enabled check box. (If the Search Properties tabs are not being displayed, right-click the alert definition and select the Show Properties menu command.)

When the alert is disabled, the Alert column displays ‘Disabled’.


	NOTE: If using the Alert tab, click the Save button to apply the change.

In addition to disabling an alert, you can also disable the alerting transports for an alert-enabled search.

To disable email alerts for individual search definition:

Open the Searches page.

Expand the Private and Shared folders in the explorer view to locate the alert-enabled search to be disabled. Select the alert from the Search list in the right-hand pane.

Use one of the following methods to disable an alert:

•

Right-click the alert and select Alert | Disable Transport | Email. A message box will be displayed asking you to confirm that you want to disable the alert. Click Yes.

•

Open the Alert tab, clear the Email check box and the Alert Enabled check box. (If the Search Properties tabs are not being displayed, right-click the alert definition and select the Show Properties menu command.)

If this is the only transport or when all transports are disabled, the definition returns to a ‘Search’ type.


	NOTE: If using the Alert tab, click Save to apply the change.

To disable SNMP alerts for individual search definition:

Open the Searches page.

Expand the Private and Shared folders in the explorer view to locate the alert-enabled search to be disabled. Select the alert from the Search list in the right-hand pane.

Use one of the following methods to disable an alert:

•

Right-click the alert and select Alert | Disable Transport | SNMP. A message box will be displayed asking you to confirm that you want to disable the alert. Click Yes.

•

Open the Alert tab, clear the SNMP check box and the Alert Enabled check box. (If the Search Properties tabs are not being displayed, right-click the alert definition and select Show Properties.)

If this is the only transport or when all transports are disabled, the definition returns to a ‘Search’ type.


	NOTE: If using the Alert tab, click Save to apply the change.

To disable WMI alerts for individual search definition:

Open the Searches page.

Expand the Private and Shared folders in the explorer view to locate the alert-enabled search to be disabled. Select the alert from the Search list in the right-hand pane.

Use one of the following methods to disable an alert:

•

Right-click the alert and select Alert | Disable Transport | WMI. A message box will be displayed asking you to confirm that you want to disable the alert. Click Yes.

•

Open the Alert tab, clear the WMI check box and the Alert Enabled check box. (If the Search Properties tabs are not being displayed, right-click the alert definition and select the Show Properties menu command.)


	NOTE: If using the Alert tab, click Save to apply the change.

If this is the only transport or when all transports are disabled, the definition returns to a ‘Search’ type.

Alert History page

The Alert History page is accessed by selecting an alert enabled search, right-clicking and selecting Alert | History. This page displays details regarding the events that triggered the selected alert, including the time the alert was triggered, if the alert was successfully sent, a description of the event that triggered the alert and, if applicable, an error message stating the alert was not sent.


	NOTE: Regardless of the alert state (enabled or disabled) the alert history for an alert-enabled search is always available until it is removed using Alert \| Delete History.

The data grid on this page contains the following information for each event that triggered an alert:

Table 2. Alert History page: Field descriptions
Column	Description
Time Alerted	Displays the time the alert occurred.
Alert Type	Displays ‘Email, SNMP, or WMI’ for the type of alert that was generated.
Alerted	Indicates whether the alert was successfully sent: Yes or No.
Description	Displays a description of the events that caused this alert to be triggered.
Message	Displays an error message if the alert was not successfully sent.

View alert history

For each enabled alert, two additional context menu commands become available whenever you right-click an alert-enabled search definition on the Searches page: Alert | History and Alert | Delete History.


	NOTE: The Alert \| History and Alert \| Delete History right-click commands are available for any search that has ever had an alert enabled in the current product version, regardless of its current state. These commands are not available for disabled alerts, only after the alert history has been deleted using Alert \| Delete History.

To view the alerts triggered for a search:

On the Searches page, select an alert-enabled search definition, right-click, expand the Alert command and select History.

This opens a new Alert History page, which displays details regarding the alerts triggered for the selected search.

To delete alert history:

On the Searches page, select an alert-enabled search, right-click, expand the Alert command and select e Delete History.

This clears the alert history for the selected alert.


	NOTE: Change Auditor deletes alerts in batches of 1000, so the alert history will not be immediately cleared; however, refreshing the screen will show the number of alerts decreasing.