Brocade Network Advisor IP User Manual v12.1.0 - Manual (Page 33)

Brocade Network Advisor IP User Manual xxxiii
53-1002947-01
SNMP informs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1198
Enabling or disabling SNMP informs . . . . . . . . . . . . . . . . . . 1198
Syslogs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1199
Adding a syslog recipient. . . . . . . . . . . . . . . . . . . . . . . . . . . . 1199
Removing a syslog recipient . . . . . . . . . . . . . . . . . . . . . . . . . 1200
Syslog forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1200
Adding a syslog filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1202
Snort message forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . 1203
Event action definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1204
Creating an event action definition. . . . . . . . . . . . . . . . . . . . 1204
Creating a new event action definition by
copying an existing definition . . . . . . . . . . . . . . . . . . . . . . . . .1217
Modifying an event action definition . . . . . . . . . . . . . . . . . . .1217
Deleting an event action definition . . . . . . . . . . . . . . . . . . . 1218
Configuring event actions for Snort messages . . . . . . . . . . 1218
Pseudo events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1220
Displaying pseudo event definitions . . . . . . . . . . . . . . . . . . 1220
Creating pseudo event definitions . . . . . . . . . . . . . . . . . . . . 1220
Setting pseudo event policies . . . . . . . . . . . . . . . . . . . . . . . . 1221
Filtering pseudo event traps . . . . . . . . . . . . . . . . . . . . . . . . . 1222
Creating a pseudo event definition by
copying an existing definition . . . . . . . . . . . . . . . . . . . . . . . . 1224
Editing a pseudo event definition . . . . . . . . . . . . . . . . . . . . . 1224
Deleting a pseudo event definition. . . . . . . . . . . . . . . . . . . . 1224
Adding a pseudo event on the escalation policy . . . . . . . . . 1225
Creating an event action with a pseudo event on the escalation
policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1226
Adding a pseudo event on the resolving policy . . . . . . . . . . 1227
Creating an event action with a pseudo event on
the resolving policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1228
Adding a pseudo event on the flapping policy . . . . . . . . . . . 1229
Creating an event action with a pseudo event on
the flapping policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1229
Event custom reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1231
Defining report settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1232
Defining the report identity . . . . . . . . . . . . . . . . . . . . . . . . . . 1233
Filtering a report definition . . . . . . . . . . . . . . . . . . . . . . . . . . 1235
Filtering report events by date and time . . . . . . . . . . . . . . . 1237
Creating a new report definition by copying
an existing definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1239
Editing a report definition . . . . . . . . . . . . . . . . . . . . . . . . . . . 1239
Deleting a report definition . . . . . . . . . . . . . . . . . . . . . . . . . . 1240
Event custom report schedules . . . . . . . . . . . . . . . . . . . . . . . . . . 1240
Adding or editing an event report schedule . . . . . . . . . . . . . .1241
Event logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1243
Viewing event logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1243
Copying part of a log entry . . . . . . . . . . . . . . . . . . . . . . . . . . 1243
Copying an entire log entry . . . . . . . . . . . . . . . . . . . . . . . . . . 1244
Exporting the entire log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1244
E-mailing all event details from the Master Log . . . . . . . . . 1245