Configuring event actions for Snort messages . . . . . . . . . . 1180

Pseudo events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1181 Displaying pseudo event definitions . . . . . . . . . . . . . . . . . . 1182 Creating pseudo event definitions . . . . . . . . . . . . . . . . . . . . 1182 Setting pseudo event policies . . . . . . . . . . . . . . . . . . . . . . . . 1183 Filtering pseudo event traps . . . . . . . . . . . . . . . . . . . . . . . . . 1184 Creating a pseudo event definition by copying an existing definition 1186

Editing a pseudo event definition . . . . . . . . . . . . . . . . . . . . . 1186 Deleting a pseudo event definition. . . . . . . . . . . . . . . . . . . . 1186 Adding a pseudo event on the escalation policy . . . . . . . . . .1187 Creating an event action with a pseudo event on the escalation policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1188 Adding a pseudo event on the resolving policy . . . . . . . . . . 1189 Creating an event action with a pseudo event on the resolving policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1190 Adding a pseudo event on the flapping policy . . . . . . . . . . . .1191 Creating an event action with a pseudo event

on the flapping policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1191

Event custom reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1193 Defining report settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1194 Defining the report identity . . . . . . . . . . . . . . . . . . . . . . . . . . 1195 Filtering a report definition . . . . . . . . . . . . . . . . . . . . . . . . . . .1197 Filtering report events by date and time . . . . . . . . . . . . . . . 1199 Creating a new report definition by copying

an existing definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1201 Editing a report definition . . . . . . . . . . . . . . . . . . . . . . . . . . . 1201 Deleting a report definition . . . . . . . . . . . . . . . . . . . . . . . . . . 1202

Event custom report schedules . . . . . . . . . . . . . . . . . . . . . . . . . . 1202 Adding or editing an event report schedule . . . . . . . . . . . . . 1203

Event logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1205 Viewing event logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1205 Copying part of a log entry . . . . . . . . . . . . . . . . . . . . . . . . . . 1205 Copying an entire log entry . . . . . . . . . . . . . . . . . . . . . . . . . . 1206 Exporting the entire log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1206 E-mailing all event details from the Master Log . . . . . . . . . 1207 E-mailing selected event details from the Master Log . . . . 1207 Displaying event properties from the Master Log . . . . . . . . 1207 Copying part of the Master Log. . . . . . . . . . . . . . . . . . . . . . . 1209 Copying the entire Master Log . . . . . . . . . . . . . . . . . . . . . . . 1209 Exporting the Master Log . . . . . . . . . . . . . . . . . . . . . . . . . . . 1209 Filtering events in the Master Log. . . . . . . . . . . . . . . . . . . . . .1210

Chapter 38

Packet Capture (Pcap)

 

 

In this chapter

1213

 

Configuring packet captures

1213

Chapter 39

Technical Support

 

xxxiv

Brocade Network Advisor IP User Manual

 

53-1003056-01

Page 34
Image 34
Brocade Communications Systems IP250 user manual Chapter Technical Support, This Configuring packet captures