Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1094
 
29-32
Cisco AsyncOS 8.0.1 for Email User Guide
 
Chapter 29      System Administration
  Alerts
Configuring Alert Settings
Alert settings are global settings, meaning that they affect how all of the alerts behave.
Note
Use the 
alertconfig
 CLI command to define the number of alerts to save on the appliance to view later.
Editing Alert Settings
Procedure 
Step 1
Click Edit Settings on the Alerts page. 
Step 2
Enter a Header From: address to use when sending alerts, or select Automatically Generated 
(“alert@<hostname>”).
Step 3
Mark the checkbox if you want to specify the number of seconds to wait between sending duplicate 
alerts. For more information, see 
.
Specify the initial number of seconds to wait before sending a duplicate alert.
Specify the maximum number of seconds to wait before sending a duplicate alert.
Step 4
You can enable AutoSupport by checking the IronPort AutoSupport option. For more information about 
AutoSupport, see 
If AutoSupport is enabled, the weekly AutoSupport report is sent to alert recipients set to receive 
System alerts at the Information level. You can disable this via the checkbox.
Step 5
Submit and commit your changes.
Viewing the Top Alerts
The Email Security appliances saves the latest alerts so you can view them in both the GUI and the CLI 
in case you lose or delete the alert messages. These alerts cannot be downloaded from the appliance.
To view a list of the latest alerts, click the View Top Alerts button on the Alerts page or use the 
displayalerts
 command in the CLI. You can arrange the alerts in the GUI by date, level, class, text, 
and recipient.
By default, the appliance saves a maximum of 50 alerts to displays in the Top Alerts window. Use the 
alertconfig -> setup
 command in the CLI to edit the number of alerts that the appliance saves. If you 
want to disable this feature, change the number of alerts to 0.
Alert Listing
The following tables list alerts by classification, including the alert name (internal descriptor used by 
Cisco), actual text of the alert, description, severity (critical, information, or warning) and the parameters 
(if any) included in the text of the message. The value of the parameter is replaced in the actual text of 
the alert. For example, an alert message below may mention “$ip” in the message text. “$ip” is replaced 
by the actual IP address when the alert is generated.