H3C Technologies H3C SecCenter IPS Manager - Manual (Page 80)

74
Function Description
Authorizing operators
Authorizes specific operators to manage the custom events.
Follow these steps:
1. Select the check boxes before the events that you want to permit
operators to manage it.
2. Click Authorize.
3. Select the operators, and click Apply.
Canceling authorization
Removes operators from the authorized operators of the task. The
operation procedure is similar to operator authorization procedure.
Custom event list
From the navigation tree of the IPS management component, select Custom Events under Policy
Management to enter the custom event management page. Table 76 describes the fields of the custom
event list.
Table 76 Fields of the custom event list
Field Description
Event Name Name of the custom event
Level Level of the custom event, which can be critical, major, minor, or warning.
Event Notification
Alarm method when an event is recorded and an alarm is triggered, which can be
email alarm, sound alarm, or both.
Unacknowledged Events
Number of events that are not acknowledged.
If the field is null, that means all events of the particular kind are acknowledged.
Last Trigger Time when the last alarm was triggered.
Status
Status of the custom event, which can be enabled or disabled.
Only enabled custom events can filter log data.
Operation Allows you to modify custom event settings.
Authorized Operators Displays operators who are authorized to custom the event.
Adding a custom event
1. From the navigation tree of the IPS management component, select Custom Events under Policy
Management to enter the custom event management page.
2. Click Add to enter the page for adding a custom event, shown in Figure 74 .
3. Type the custom event name and description, select a level, configure rules and the alarm mode,
and specify the custom event status.
Table 77 describes configuration items for adding a custom
event.
4. Click OK.