HP Host Intrusion Detection System (HIDS) manual Modifying a Surveillance Group

Schedule Manager Screen

Configuring Surveillance Groups

Step 3. Create a name for the new surveillance group.

a.Click the Copy button on the Surveillance Groups panel. This opens the Copy Surveillance Group dialog box (Figure 5-6).

Figure 5-6 Copy Surveillance Group Dialog

b.Enter a name in the input field. Valid characters are alphanumeric and underscore; the first character must be alphanumeric. Schedule names are case-sensitive. If you include invalid characters, you will be prompted to have them replaced with underscores.

c.Click OK to accept it. Click Cancel to quit.

The new group’s templates and values are identical to the old group’s.

Step 4. To revise the new group, follow the procedures in “Modifying a Surveillance Group” on page 68.

Modifying a Surveillance Group

NOTE

Step 1.

Step 2.

Step 3.

Step 4.

NOTE

Do not modify any predefined group, distributed with HP-UX HIDS. It cannot be saved. Copy it instead. See “Copying a Surveillance Group” on page 67 and “Predefined Surveillance Schedules and Groups” on page 81.

To modify a surveillance group

Go to the Configure tab of the Schedule Manager screen:

Select the group in the Surveillance Groups panel.

In the Select column of the Templates panel, click the check boxes to mark the templates you want to include in the group. You can also use the Select All and Clear All buttons to mark all or none of the templates.

Using the Templates and Properties panels, edit the property values. See “Configuring Detection Templates” on page 71.

You cannot modify, rename, or delete a surveillance group if it is in a schedule that is currently scheduled or running on an agent host. For more information, see Chapter 4, “System Manager Screen,” on page 43.

68 Chapter 5