SNS ProTip for SIEM: How to create a notification when a specific signature triggers

Version 1

    Administrators may need to be notified of a specific event or send an alert to a monitoring station via SNMP or syslog. You can configure the Enterprise Security Manager (ESM) to generate notifications for many conditions, including alert rate, deviation from baseline, and time of day.

    For instructions on how to create a notification when a specific event occurs, see KB74682 (


    For more resources, visit the McAfee KnowledgeBase and search for SIEM-related KBs and visit the McAfee SIEM Community


    To help you maximize your SIEM deployment, McAfee SNS ProTips deliver troubleshooting, best practices and how-to tips with links in-depth KnowledgeBase resources. To unsubscribe from ProTips or change your SNS settings, visit the SNS Subscription Center .