Cisco Cisco Firepower Management Center 4000

Page of 1844
 
55-37
FireSIGHT System User Guide
 
Chapter 55      Using Health Monitoring
  Configuring Health Monitor Alerts
When any part of a module is blacklisted, the line for that module appears in boldface type in the Defense 
Center web interface.
Tip
After the blacklist settings take effect, the appliance shows as 
Partially Blacklisted
 or 
All Modules 
Blacklisted
 on the Blacklist page and in the Appliance Health Monitor Module Status Summary, but only 
in expanded views on the main Appliance Status Summary page. Make sure that you keep track of 
individually blacklisted modules so you can reactivate them when you need them. You may miss 
necessary warning or critical messages if you accidentally leave a module disabled.
To blacklist an individual health policy module:
Access: 
Admin/Maint
Step 1
Select 
Health > Blacklist
.
The Blacklist page appears.
Step 2
Sort by Group, Policy, or Model, then click 
Edit
 to display the list of health policy modules for an 
appliance.
The health policy modules appear. 
Step 3
Select each module that you want to blacklist.
Step 4
Click 
Save
.
Configuring Health Monitor Alerts
License: 
Any
You can set up alerts to notify you through email, through SNMP, or through the system log when the 
status changes for the modules in a health policy. You can associate an existing alert response with health 
event levels to trigger and alert when health events of a particular level occur. 
For example, if you are concerned that your appliances may run out of hard disk space, you can 
automatically send an email to a system administrator when the remaining disk space reaches the 
warning level. If the hard drive continues to fill, you can send a second email when the hard drive reaches 
the critical level. 
For more information, see the following topics:
  •
  •
  •
  •
Creating Health Monitor Alerts
License: 
Any