Cisco Cisco Email Security Appliance C160 Mode D'Emploi
29-26
Cisco AsyncOS 8.0.2 for Email User Guide
Chapter 29 System Administration
Alerts
Alert Settings
Alert settings control the general behavior and configuration of alerts, including:
•
The RFC 2822 Header From: when sending alerts (enter an address or use the default
“alert@<hostname>”). You can also set this via the CLI, using the
“alert@<hostname>”). You can also set this via the CLI, using the
alertconfig -> from
command.
•
The initial number of seconds to wait before sending a duplicate alert.
•
The maximum number of seconds to wait before sending a duplicate alert.
•
The status of AutoSupport (enabled or disabled).
•
The sending of AutoSupport’s weekly status reports to alert recipients set to receive System alerts
at the Information level.
at the Information level.
Sending Duplicate Alerts
You can specify the initial number of seconds to wait before AsyncOS will send a duplicate alert. If you
set this value to 0, duplicate alert summaries are not sent and instead, all duplicate alerts are sent without
any delay (this can lead to a large amount of email over a short amount of time). The number of seconds
to wait between sending duplicate alerts (alert interval) is increased after each alert is sent. The increase
is the number of seconds to wait plus twice the last interval. So a 5 second wait would have alerts sent
at 5 seconds, 15, seconds, 35 seconds, 75 seconds, 155 seconds, 315 seconds, etc.
set this value to 0, duplicate alert summaries are not sent and instead, all duplicate alerts are sent without
any delay (this can lead to a large amount of email over a short amount of time). The number of seconds
to wait between sending duplicate alerts (alert interval) is increased after each alert is sent. The increase
is the number of seconds to wait plus twice the last interval. So a 5 second wait would have alerts sent
at 5 seconds, 15, seconds, 35 seconds, 75 seconds, 155 seconds, 315 seconds, etc.
Eventually, the interval could become quite large. You can set a cap on the number of seconds to wait
between intervals via the maximum number of seconds to wait before sending a duplicate alert field. For
example, if you set the initial value to 5 seconds, and the maximum value to 60 seconds, alerts would be
sent at 5 seconds, 15 seconds, 35 seconds, 60 seconds, 120 seconds, etc.
between intervals via the maximum number of seconds to wait before sending a duplicate alert field. For
example, if you set the initial value to 5 seconds, and the maximum value to 60 seconds, alerts would be
sent at 5 seconds, 15 seconds, 35 seconds, 60 seconds, 120 seconds, etc.
SMTP Routes and Alerts
Alerts sent from the appliance to addresses specified in the Alert Recipient follow SMTP routes defined
for those destinations.
for those destinations.
Cisco
AutoSupport
To allow Cisco to better support and design future system changes, the Cisco appliance can be
configured to send Cisco Systems a copy of all alert messages generated by the system. This feature,
called AutoSupport, is a useful way to allow our team to be proactive in supporting your needs.
AutoSupport also sends weekly reports noting the uptime of the system, the output of the
configured to send Cisco Systems a copy of all alert messages generated by the system. This feature,
called AutoSupport, is a useful way to allow our team to be proactive in supporting your needs.
AutoSupport also sends weekly reports noting the uptime of the system, the output of the
status
command, and the AsyncOS version used.
By default, alert recipients set to receive Information severity level alerts for System alert types will
receive a copy of every message sent to Cisco. This can be disabled if you do not want to send the weekly
alert messages internally. To enable or disable this feature, see
receive a copy of every message sent to Cisco. This can be disabled if you do not want to send the weekly
alert messages internally. To enable or disable this feature, see
Alert Messages
Alert messages are standard email messages. You can configure the Header From: address, but the rest
of the message is generated automatically.
of the message is generated automatically.