46
Chapter20:MonitoringSyslogMessages
10. Ifyouwanttolimitruleapplicationtowithinaspecificperiodoftime,
selecttheTimeofDaytab,checkEnableTimeofDaychecking,enterthe
timeperiod,andthencheckthedaysoftheweekonwhichtoapplytherule.
Notes:
l
EnablingTimeofDaycheckingcreatesmoreoverheadfortheCPU.
l
Messagesreceivedoutsidethespecifiedtimeframewillnottrigger
alerts.
11. Ifyouwanttosuppressalertactionsuntilaspecifiednumberof
messagesarrivethatmatchtherule,completethefollowingprocedure:
Note:WhenSuspendfurtherAlertActionsforischecked,alertactions
arenotsentuntilthespecifiedamountoftimehasexpired.Oncethetime
periodhasexpired,onlynewalertsaresent.Allalertssuppressedduring
thetimeperiodarediscarded.
a. SelecttheTriggerThresholdtab,andthencheckDefineaTrigger
ThresholdforthisRule.
b. Enteroptionvaluesasappropriate.
12. ConfigureSyslogalertactionsontheAlertActionstab,asshowninthe
followingsteps:
a. Ifyouareassociatinganewactiontotherule,clickAddNew
Action.Formoreinformationaboutavailableactions,seeAvailable
Syslog
Alert
Actions
.
b. Ifyouwanttoeditanexistingactionfortherule,selectanaction
fromthelist,andthenclickEditSelectedAction.
c. Configuretheactionasappropriate.Formoreinformationabout
availableactions,seeAvailable
Syslog
Alert
Actions
.
Note:Syslogalertsuseauniquesetofvariables.Formore
informationaboutavailableSyslogvariables,seeSyslog
Alert
Variables
.
d. Ifyouneedtodeleteanaction,selecttheaction,andthenclick
DeleteAction.
e. Usethearrowbuttonstosettheorderinwhichactionsareperformed.
Note:Actionsareprocessedintheorderlisted,fromtoptobottom.
f. ClickOKtosaveallchangesandreturntoSyslogViewerSettings.
615