1 Reply Latest reply on Aug 14, 2013 5:16 AM by jeremyfernandes

    Increase the Severity level

    Chandimal Karunarathne

      Increase the Severity level

       

      I have two questions:

       

      Q1)     How to increase the default value of the severity levels(Ex: default  average severity level for High 75 to 85)?

      Q2)     I want to increase the event severity level based on the no of event generate from particular event, within the specific time period. 

       

      I really appreciate your support for this.

        • 1. Re: Increase the Severity level
          jeremyfernandes

          Hello,

           

          Q1) How to increase the default value of the severity levels(Ex: default  average severity level for High 75 to 85)?

          You should have the Device-Id (Extract 1st part of Signature-ID) of the log.

          - Click the "Policy Editor" button on the top left-hand side.

          - Go to the "Advance Syslog Parser" tab

          - Search for the event

          - Go to "Edit" -> "Modify"

          - Go to the "Mapping" tab

          - Change the values of the "Severity Mapping"

           

           

          Q2) I want to increase the event severity level based on the no of event generate from particular event, within the specific time period.

          To change the default severity of the event.

          - You should have the Signature-ID of the log.

          - Click the "Policy Editor" button on the top left-hand side.

          - Go to the "Data Source" tab

          - Search for the event with the matching Signature-ID

          - Click on the severity in the "Severity" column and choose "custom severity value"

           

          Thanks,

           

          Jeremy.