Cisco CS-MARS-20-K9 - Security MARS 20, Руководство пользователя

Страница: 460 / 588

22-6
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 22 Sending Alerts and Incident Notifications
Configure a Rule to Send an Alert Action
Figure 22-2 Action Selection Dialog
Step 3 Do one of the following five actions:
1.
Remove an alert action currently applied to the rule.
– In the left-hand area, pick the alert actions to remove with Ctrl+Click, then click Remove >> .
The alert action is deleted from the left-hand area.
– Proceed to Step 13 to complete the procedure.
•
Apply an existing alert action to the rule.
– In the right-hand area, click the check boxes of the alert actions you require, then click <<== .
The alert action appears in the left-hand area.
– Proceed to Step 13 to complete the procedure.
•
Delete an existing alert action from MARS.
– Click the check box of the alert action in the right-hand area, then click Delete .
A delete verification window appears.
– Click Yes.
The alert action is deleted from the right-hand area.
– Proceed to Step 13 to complete the procedure.
•
Edit an existing alert action.
– Click the check box of the alert action in the right-hand area, then click Edit .
The Alert recipients page appears in a new window, as shown in Figure 22-3 .
– Proceed to Step 4 to complete the procedure.
•
Create a new alert action.
– Click Add .
The Alert recipients page appears in an a new window, as shown in Figure 22-3 .