WatchGuard x1000 用户指南
Customizing Logging and Notification by Service or Option
User Guide
217
Setting Launch Interval and Repeat Count
Two parameters work in conjunction with the Event Pro-
cessor Repeat Interval to control notification timing:
cessor Repeat Interval to control notification timing:
Launch Interval
The minimum time (in minutes) between separate
launches of a notifier. Set this parameter to prevent
the launch of several notifiers in response to similar
events that take place in a short amount of time.
launches of a notifier. Set this parameter to prevent
the launch of several notifiers in response to similar
events that take place in a short amount of time.
Repeat Count
The threshold for how often an event can repeat
before the Firebox activates the special repeat
notifier. The repeat notifier creates a log entry
stating that the notifier in question is repeating.
Notification repeats only after this number of
events occurs.
before the Firebox activates the special repeat
notifier. The repeat notifier creates a log entry
stating that the notifier in question is repeating.
Notification repeats only after this number of
events occurs.
As an example of how these two values interact, suppose
you have set up notification with these values:
•
you have set up notification with these values:
•
Launch interval = 5 minutes
•
Repeat count = 4
A port space probe begins at 10:00 a.m. and continues once
per minute, triggering the logging and notification mecha-
nisms. Here is the time line of activities that would result
from this event with the above timing and repeating setup:
per minute, triggering the logging and notification mecha-
nisms. Here is the time line of activities that would result
from this event with the above timing and repeating setup:
1
10:00–Initial port space probe (first event)
2
10:01–First notification launched (one event)
3
10:06–Second notification launched (reports five
events)
events)
4
10:11–Third notification launched (reports five
events)
events)
5
10:16–Fourth notification launched (reports five
events)
events)
The time intervals between activities 1, 2, 3, 4, and 5 are
controlled by the launch interval, which was set to 5 min-
utes.
controlled by the launch interval, which was set to 5 min-
utes.