Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi
14-31
AsyncOS 8.3.5 for Cisco Content Security Management User Guide
Chapter 14 Common Administrative Tasks
Managing Alerts
Viewing Recent Alerts
About Duplicate Alerts
You can specify the initial number of seconds to wait before AsyncOS will send a duplicate alert. If you
set this value to 0, duplicate alert summaries are not sent; instead, all duplicate alerts are sent without
any delay (this can lead to a large amount of email over a short amount of time). The number of seconds
to wait between sending duplicate alerts (alert interval) is increased after each alert is sent. The increase
is the number of seconds to wait plus twice the last interval. So a 5-second wait would have alerts sent
at 5 seconds, 15 seconds, 35 seconds, 75 seconds, 155 seconds, 315 seconds, and so on.
set this value to 0, duplicate alert summaries are not sent; instead, all duplicate alerts are sent without
any delay (this can lead to a large amount of email over a short amount of time). The number of seconds
to wait between sending duplicate alerts (alert interval) is increased after each alert is sent. The increase
is the number of seconds to wait plus twice the last interval. So a 5-second wait would have alerts sent
at 5 seconds, 15 seconds, 35 seconds, 75 seconds, 155 seconds, 315 seconds, and so on.
Eventually, the interval could become large. You can set a cap on the number of seconds to wait between
intervals via the maximum number of seconds to wait before sending a duplicate alert field. For example,
if you set the initial value to 5 seconds, and the maximum value to 60 seconds, alerts would be sent at 5
seconds, 15 seconds, 35 seconds, 60 seconds, 120 seconds, and so on.
intervals via the maximum number of seconds to wait before sending a duplicate alert field. For example,
if you set the initial value to 5 seconds, and the maximum value to 60 seconds, alerts would be sent at 5
seconds, 15 seconds, 35 seconds, 60 seconds, 120 seconds, and so on.
Cisco AutoSupport
To allow Cisco to better support and design future system changes, the Cisco Content Security appliance
can be configured to send Cisco a copy of all alert messages generated by the system. This feature, called
‘AutoSupport’, is a useful way to allow Customer Support to be proactive in supporting your needs.
AutoSupport also sends weekly reports noting the uptime of the system, the output of the status
command, and the AsyncOS version used.
can be configured to send Cisco a copy of all alert messages generated by the system. This feature, called
‘AutoSupport’, is a useful way to allow Customer Support to be proactive in supporting your needs.
AutoSupport also sends weekly reports noting the uptime of the system, the output of the status
command, and the AsyncOS version used.
By default, alert recipients set to receive Information severity level alerts for System alert types receive
a copy of every message sent to Cisco. This can be disabled if you do not want to send the weekly alert
messages internally. To enable or disable this feature, select Management Appliance > System
Administration > Alerts and click edit settings.
a copy of every message sent to Cisco. This can be disabled if you do not want to send the weekly alert
messages internally. To enable or disable this feature, select Management Appliance > System
Administration > Alerts and click edit settings.
By default, if AutoSupport is enabled, the weekly AutoSupport report is sent to alert recipients set to
receive system alerts at the Information level.
receive system alerts at the Information level.
To Do
This
View a list of recent alerts
Users with administrator and operator access can choose
Management Appliance > System Administration > Alerts
and click the View Top Alerts button.
Management Appliance > System Administration > Alerts
and click the View Top Alerts button.
Alerts appear even if there was a problem emailing them.
Sort the list
Click a column heading.
Specify the maximum number of alerts
to save in this list
to save in this list
Use the
alertconfig
command in the command-line
interface
Disable this feature
Use the
alertconfig
command in the command-line
interface to set the maximum number of alerts to zero (0).