xxxiv Brocade Network Advisor IP User Manual
53-1003056-01
Configuring event actions for Snort messages . . . . . . . . . . 1180
Pseudo events. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1181
Displaying pseudo event definitions . . . . . . . . . . . . . . . . . . 1182
Creating pseudo event definitions . . . . . . . . . . . . . . . . . . . . 1182
Setting pseudo event policies. . . . . . . . . . . . . . . . . . . . . . . . 1183
Filtering pseudo event traps . . . . . . . . . . . . . . . . . . . . . . . . . 1184
Creating a pseudo event definition by copying an existing definition
1186
Editing a pseudo event definition. . . . . . . . . . . . . . . . . . . . . 1186
Deleting a pseudo event definition. . . . . . . . . . . . . . . . . . . . 1186
Adding a pseudo event on the escalation policy. . . . . . . . . .1187
Creating an event action with a pseudo event on the escalation
policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1188
Adding a pseudo event on the resolving policy . . . . . . . . . . 1189
Creating an event action with a pseudo event on the
resolving policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1190
Adding a pseudo event on the flapping policy. . . . . . . . . . . .1191
Creating an event action with a pseudo event
on the flapping policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1191
Event custom reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1193
Defining report settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1194
Defining the report identity. . . . . . . . . . . . . . . . . . . . . . . . . . 1195
Filtering a report definition . . . . . . . . . . . . . . . . . . . . . . . . . . .1197
Filtering report events by date and time . . . . . . . . . . . . . . . 1199
Creating a new report definition by copying
an existing definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1201
Editing a report definition . . . . . . . . . . . . . . . . . . . . . . . . . . . 1201
Deleting a report definition. . . . . . . . . . . . . . . . . . . . . . . . . . 1202
Event custom report schedules. . . . . . . . . . . . . . . . . . . . . . . . . . 1202
Adding or editing an event report schedule. . . . . . . . . . . . . 1203
Event logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1205
Viewing event logs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1205
Copying part of a log entry . . . . . . . . . . . . . . . . . . . . . . . . . . 1205
Copying an entire log entry . . . . . . . . . . . . . . . . . . . . . . . . . . 1206
Exporting the entire log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1206
E-mailing all event details from the Master Log . . . . . . . . . 1207
E-mailing selected event details from the Master Log . . . . 1207
Displaying event properties from the Master Log . . . . . . . . 1207
Copying part of the Master Log. . . . . . . . . . . . . . . . . . . . . . . 1209
Copying the entire Master Log . . . . . . . . . . . . . . . . . . . . . . . 1209
Exporting the Master Log . . . . . . . . . . . . . . . . . . . . . . . . . . . 1209
Filtering events in the Master Log. . . . . . . . . . . . . . . . . . . . . .1210
Chapter 38 Packet Capture (Pcap)
In this chapter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1213
Configuring packet captures . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1213
Chapter 39 Technical Support