NOTE:
An alert message is sent only when a match is found between the
contents of log messages and a search expression. This means that if no
match is found, more time may pass between two alert messages than
the interval specified as the cooldown period.
f. Click
to save your details.
Expected result:
You have successfully configured a target for your alert where alert messages
will be sent.
2.
Optional step
: You can also specify the email address from which the alerts are sent
to your targets. Configuring an email address from where you wish to receive emails
can be useful for filtering purposes. If you do not specify such an email address, a
default one will be used.
For detailed instructions, see the steps describing how to specify a
Send e-mails as
"Configuring e-mail alerts" in the Administration Guide
.
3. Once you have set up a target or targets, navigate to the search interface by going to
Search > Logspaces
.
Figure 19: Search > Logspaces — Setting up alerts on the search interface
4. In the
Logspace name
menu, select the relevant logspace.
5. In the
Search expression
field, enter the search expression that you wish to
SSB 5.3.0 User Guide
Creating content-based alerts
41
