Novell SENTINEL LOG MANAGER 1.0.0.5 - 03-31-2010, Administration Manual

Page: 127 / 168

Configuring Rules 127
no
vd
ocx
(e
n)
19
Fe
bru
a
ry
20
10
8
Click Save .
7.4 Forwarding the Events to Another Sentinel
System
Sentinel Log Manager is installed with a rule that forwards events to another sentinel system. The
rule is called Forward Events To Another Sentinel System. By default, the Forward Events To
Another Sentinel System rule is configured to filter out internal system events and events with a
severity that is less than four. This rule filters out the following three types of system events:
Š
Audit (A)
Š
Performance (P)
Š
Internal (I)
You can also change the conditions of the rule to filter more events or remove conditions to filter
fewer events.
Novell recommends that you configure the rule to forward only those events that you want to store
on the Sentinel system for more in-depth reporting and analysis.
Š
Section 7.4.1, “Activating the Forward Events To Another Sentinel System Rule,” on page 128
Š
Section 7.4.2, “Configuring Sentinel Link Integrator Settings,” on page 128
Fields Description
Action name Specify an action name. The action name should be unique.
SMTP Server Specify the hostname or IP address of the SMTP server.
Port Specify the port of the SMTP server. The default port value is 25.
NOTE: Do not change the port value unless your SMTP server uses a different
port.
Test Click Test to validate the SMTP server and port.
Username Specify a username to log in to the SMTP server.
Password Specify a password to log in to the SMTP server.
From Specify an e-mail address that the e-mail messages comes from.
Send To Specify an e-mail address to receive the e-mail notifications for event sources
that are auto-created without a time zone.
NOTE: Specify multiple e-mail addresses by separating them with commas.