Console : Granular Event Management Overview

Configuring Events on the Console Panel
To experience the benefits of GEM, you must configure alerts for important events. In the Events screens on the Console panel, you can configure the frequency of subscription expiration and task failure notifications, as well as severities, thresholds, schedules, and alerts for handling events.
See the following sections:
Configuring Event Alert Settings
In Events > Settings, you can specify the following:
To configure Event Settings, complete the following steps:
1
On the Console panel, navigate to the Events > Settings screen.
2
Under Email Alert Format Preferences, select whether the email alert will be sent as HTML, Plain Text, or Plain Text (Simple). The Simple setting sends a very short email to ensure that the email is not cut off by character limits.
 
3
Click Update.
Configuring Event Severities
In the Events > Severity screen, you can create your own severity levels or use predefined severity levels. You can delete severity levels in this screen as well. Defining the severity priority can also be performed in this screen. Users with permissions to the Severity screen can create and edit these severities.
GMS supplies the following three predefined severity levels:
Information: This is the lowest severity level
Warning: This is a mid-range severity level
Critical: This is the highest severity level
To configure Event Severities, complete the following steps:
1
On the Console panel, navigate to the Events > Severity screen. On this screen, you can resequence the severities in importance by entering a severity sequence number in each field.
 
2
3
In the Add Severity dialog box, type a name for the new severity level in the Name field.The Domain pull-down list is only available for a Super Admin.
4
 
5
Click Update.
6
In the Console > Events > Severity screen, assign the level for the new severity you created by changing the numbering in the Sequence column of the Severity table.
7
Click Update.
To edit or delete a Severity, complete the following steps:
1
 
The Edit Severity pop-up window displays.
2
3
To delete a Severity(s), select the check box(es) for the severitie(s) you wish to delete, then click Update. You can also click Delete in the Edit column, to delete a single report.
Configuring Event Thresholds
In the Events > Threshold screen, you can view existing event thresholds, enable or disable them, and configure their elements. A threshold defines the condition for which an event is triggered. Predefined thresholds have names similar to predefined Alert Types. Each threshold can contain one or more threshold elements. An element consists of an Operator, a Value, and a Severity.
The following tasks are described in this section:
Adding a Custom Threshold
To add a custom threshold, complete the following steps:
1
 
2
Click Add Threshold to add a new threshold.
3
 
4
Select Visible to Non-Administrators if you want the threshold to be visible to non-administrators. If this is selected, anyone can view the threshold elements and use the threshold in customized reports.
5
Click Update.
Adding a Threshold Element
Elements are components of a threshold. You must define a threshold by defining its elements.
1
2
 
3
In the Operator pull-down menu, select from the list of operators.
 
4
In the Value field, enter a value.
5
In the Description field, enter a description to override the auto-generated description.
6
In the Severity field, select a severity.
7
Disable allows you to temporarily disable the threshold without deleting it. Select Disable if you want to disable the threshold. For more information about the enabling and disabling feature, see Enabling/Disabling Thresholds and Threshold Elements .
8
Click Update.
Editing a Custom or Existing Threshold
To edit your custom or existing threshold, complete the following steps:
1
On the Events > Threshold screen, click edit in the threshold row.
2
3
Click Update.
Editing an Threshold Element
To edit an existing element of a Threshold, complete the following steps:
1
On the Events > Threshold screen, click the Edit icon located in the Configure column in the element row.
The Edit Threshold pop-up window displays:
 
Some alerts created by certain Alert Types contain predefined Thresholds that might not be edited. Alert Types: Unit HF Status, Unit WAN Status, Unit Locally Changed, and Thresholds with the same name in the Console Panel.
2
In the Operator field, select from the drop down menu the type of operator to apply to your threshold element.
.
3
In the Value field, enter the value for your threshold element.
4
In the Description field, enter the description for your threshold element.
5
In the Severity field, select the severity priority from the drop down menu. These are color coded for your easy reference on the Events > Threshold screen.
 
6
7
Click Update.
Enabling/Disabling Thresholds and Threshold Elements
The GEM feature provides a Disable check box that allows you to disable or enable thresholds or individual elements within that threshold. Disabling an element or threshold rather than deleting it is beneficial because of the time invested in creating it. If it is needed again, you can simply enable it.
You can disable a threshold by disabling all its elements. You can also disable individual elements within a threshold.
To enable or disable Thresholds and/or their elements, complete the following tasks:
1
On the Console panel, navigate to the Events > Threshold screen. On this screen, you are able to view existing Thresholds. You can also view existing elements within those thresholds by clicking the expand button by a threshold. You have the following two options for the enabling/disabling feature:
2
3
Select Disable to disable the element or de-select Disable to enable the element.
 
4
Click Update.
Deleting a Threshold and Threshold Elements
On the Events > Threshold screen, you can delete Thresholds and Threshold Elements. This can be done by using Delete Threshold(s)/Element(s). To view the elements within a threshold, expand the threshold. You can select which threshold or elements within that threshold to delete. If you delete a threshold, the elements within that threshold are automatically deleted as well.
To delete thresholds and threshold elements, complete the following steps:
1
On the Events > Threshold screen, optionally expand the threshold to view the individual elements.
2
 
3
4
Configuring Event Schedules
The next component on the Console panel is Events > Schedule. In this screen, you can add, delete, or configure schedules and schedule groups.
Schedule groups are one or more schedules grouped within an object. Administrators and Owners can edit these objects. Other users should be able to view or use them only if Visible to Non-Administrators is selected.
The following tasks are described in this section:
Adding an Event Schedule
In Events > Schedules you can add, delete, or configure schedules. You will see your schedules and schedule groups, their descriptions, and whether they are enabled. You can also individually delete one schedule or schedule group at a time by selecting the trash-icon on the right hand side for each row. For quick reference, you can hover your mouse over the descriptions to quickly view the type of schedule and the days and times when it is active.
To add an event schedule, complete the following steps:
1
On the Events > Schedules screen, click Add Schedule.
2
In the Name field, enter a name for the schedule.
3
In the Domain field, click the pull-down list and select a name. This function is for Super Admins only.
4
In the Description field, add a description for the schedule.
5
Select Visible to Non-Administrators if you want the schedule to be visible and usable by non-administrators.
6
7
Click Invert to create a schedule that is “off” during the dates and times that you specify.
8
Fill in the Date and Time fields.
Fill in Days, Start Time, and End Time fields.
9
Click Add to add this schedule to the Schedule List text box.
 
10
11
Click Update when you are finished.
Editing an Event Schedule
To edit an existing schedule, click the Edit icon on the right side of the Events > Schedule screen. The screen and procedure for editing are the same as those for adding a schedule. See Adding an Event Schedule .
Adding an Event Schedule Group
You can combine several schedules into a schedule group on the Events > Schedule screen.
To add a schedule group, complete the following steps:
1
On the Events > Schedule screen, click Add Schedule Group.
2
3
4
Click Visible to Non-Administrators to allow this schedule group to be viewed and used by non administrators.
5
Click Disable to temporarily disable the schedule group.
6
In the Schedules field, select the schedule(s) to add to your schedule group, and then use the arrow buttons to move the selected schedule into or out of the group. To move multiple schedule groups and/or schedules all at once, hold the CTRL button on your keyboard while making your selections.
 
7
Click Update.
Editing an Event Schedule Group
To edit an existing schedule group, click the Edit icon on the right side of the Events > Schedule screen. The screen and procedure for editing are the same as those for adding a event schedule group. See Adding an Event Schedule Group .
Deleting a Schedule or Schedule Group
You can delete custom schedules or schedule groups, or you can remove schedules from schedule groups. You cannot delete predefined static schedules or schedule groups. Only Administrators and Owners can delete schedules or schedule groups.
To delete an event schedule, schedule group, or remove a schedule from a schedule group:
1
Navigate to the Events > Schedule screen.
2
Click the check boxes of the schedule groups or schedules that you want deleted. When you click Schedule Group, the schedules within that schedule group are deleted as well.
3
4
5
Configuring Alerts on the Console Panel
The Console > Events > Alert Settings screen provides predefined alerts that apply to GMS as a whole. These are status type alerts, and do not use thresholds. You can hover your mouse over these to display information about them. You can configure the predefined alerts to use different destinations and schedules.
Add Alert
In the Add Alert panel you can enter an alert name and description, select the options for visible to non-administrators and disable, and enter the polling interval.
To add an alert, complete the following steps:
1
Navigate to the Events > Alert Settings page.
 
2
Click the Add Alert link.
The Add Alert screen displays.
 
3
4
Enable Visible to Non-Administrators if you want your Alert to be visible to non-administrators.
5
Enable Disable to disable this Alert.
6
Enter a Polling Interval value (in seconds: 60-86400)
Alert Type
In the Alert Type panel you can select an alert type from the provided list and view the definitions of each alert type.
To configure an Alert Type, complete the following steps:
1
Click the Alert Type pull-down list and select an alert type.
Most of the Alert Types require you to edit content. Editing Contents allows the user to pick additional information, in a granular fashion, on which the alerting has to be performed.
2
Click the Edit Content link. The Edit Contents for Alert Type Unit Status pop-up window displays.
3
Click the Threshold pull-down list and select a threshold.
4
Click Update. To reset the settings, click Reset.
Destination / Schedule
In the Destination / Schedule panel you can add up to 5 destinations and set a schedule for each.
To add a destination and set a schedule, complete the following steps:
1
Click the Add Destination link under the Destination/Schedule section. The Destination field designates where you want alerts to be sent. You have a maximum number of five destinations.
 
2
Click the Schedule pull-down list, then select a schedule type. The Schedule field designates the frequency of when you want alerts to be sent to the destination(s).
 
3
Click Update to finish adding an alert.
Enabling/Disabling Alerts
To enable and disable an alert, complete the following steps:
Enabling a Alert
1
Select Enabled of the alert(s) you wish to enable.
2
Click the Enable/Disable Alert(s) link. A confirmation window displays. Click OK to enable or disable.
 
Disabling an Alert
1
Deselect Enabled of the alert(s) you wish to disable.
2
Click the Enable/Disable Alert(s) link. A confirmation window displays. Click OK to enable or disable.
Deleting Alerts
To delete an alert, complete the following steps:
1
2
Click the Delete Alert link. A confirmation window displays.
 
3
Click OK to delete.
Editing Alerts
After an alert is created, you can go back and edit it at any time.
To edit an alert, complete the following steps:
1
Click the Configure icon of the alert you wish to edit.
 
The Edit Alert page displays.
 
2
Refer to Add Alert and follow the configuration procedures to edit your existing Alert.
Viewing Current Alerts
You can view a list of current alerts on the Events > Current Alerts page of the Firewall, SRA, CDP, or ES panel. Select a global view, group, or unit to view current alerts for your selection.