Creating an alert
A wizard guides you through creating a new Active Administrator® alert. Alerts provide you the opportunity to combine different conditions into one alert that is sent to specified email recipients. You also can add a filter to the alert to further isolate audit events for the recipient.
To create a new alert
1 Select Auditing & Alerting | Alerts.
2 Click New.
3
6 Click Next.
7 Click Add and type the email address to receive notification of the alert.
8 Click Next.
▪ To filter the list, type text in the Filter box. The list changes as you type characters. The definitions displayed contain the characters you type. For example, if you type com, the definitions displayed may contain the words Completed or Computer.
10 Click Next.Use this feature to help limit the number of emails sent to the specified email list. Alert filters are optional and applied to the details section of the event. Only the events that match the filter will be included in the notification email. For example, if the alert filter is Contains OU=Sales, only the events where OU=Sales appears in the details section are included in the notification email.
To edit a selected alert filter, click Edit.
b
d By default the filter conditions are combined using the OR operator. If you want to connect with the AND operator, select AND all conditions.
12 Click Next.
To edit a selected quiet time, click Edit.
b Select Enabled. To disable a quiet time, clear the check box.
14 Click Next.To edit a selected threshold, click Edit.
b Select Enabled. To disable a threshold, clear the check box.
16 Click Next.
a Select Enabled. To disable an action, clear the check box.
b
c For the argument, browse to open the list of Alert Action Variables.
b Click Insert.
c Click OK.
d
18 Click Next.
20 Click Finish.
Managing existing alerts
You also can suspend email notifications, either individually or all at once. To suspend the email notification globally, see Changing the alert notification policy.
To enable or disable selected alerts
1 Select Auditing & Alerting | Alerts.
2To enable or disable all alerts
1 Select Auditing & Alerting | Alerts.
2To suspend or resume email notification on selected alerts
1 Select Auditing & Alerting | Alerts.
2To suspend or resume email notification on all alerts
1 Select Auditing & Alerting | Alerts.
2
Changing the alert notification policy
To change the notification policy
1 Select Auditing & Alerting | Alerts.
2 Click Notification Policy.The Status and History pages display information about the current status of the alert notification policy.
3 Click Settings.
7 Click OK.
Setting global quiet time
Define the quiet time during which no notifications are sent. Alerts that are triggered during the quiet time are still logged to the alert history. You also can set a global quiet time for each individual alert. See Creating an alert.
To set global quiet time
1 Select Auditing & Alerting | Alerts.
2 Click Global Quiet Times.To edit a selected quiet time, click Edit.
4 Select Enabled. To disable a quiet time, clear the check box.
5 Select All Days or specify a specific day.
8 Click OK.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback 使用条款 隐私 Cookie Preference Center