Configuring E-Mail Notification Of Auto-Created Event Sources Without A Time Zone; Activating The Event Source Created With Unspecified Timezone Rule - Novell SENTINEL LOG MANAGER 1.0.0.5 - ADMINISTRATION GUIDE 03-31-2010 Administration Manual

6 Click Delete to delete the action.
If the action is deleted, a
The selected action is deleted from the configured action list.
7.3 Configuring E-Mail Notification of Auto-
Created Event Sources without a Time Zone
When event sources are auto-created without a time zone, it is recommended that an administrator
receives a notification so that a time zone can be manually assigned to the event sources, if
necessary.
By default, Sentinel Log Manager is installed with a rule that sends an e-mail message when an
event source is auto-created without a timezone. The rule is called Event Source Created With
Unspecified Timezone. It is triggered by the following conditions:
EventName = CreateEventSource AND
Message match regex .*EMPTYTZ$
The Event Name is
CreateEventSource
unique identifier (UUID) of the newly created event source. If a new event source group or a new
Collector is also created, their respective names and UUIDs are also indicated in the message. The
message also indicates if any timezone was assigned to the event source when it was created. If the
event source was created without a time zone, it shows the text
When the defined conditions are met, an e-mail is sent to the e-mail address that is configured for
the Send an email action.
Section 7.3.1, "Activating the Event Source Created with Unspecified Timezone Rule," on
page 125
Section 7.3.2, "Configuring Settings for Sending E-Mail," on page 126
7.3.1 Activating the Event Source Created with Unspecified
Timezone Rule
By default, the Event Source Created With Unspecified Timezone rule is installed with Sentinel Log
Manager, but it is in the inactive (off) state. To send an e-mail, the rule must be activated, and the e-
mail notification settings for the Send an email action must be configured.
Use the following procedure to activate the rule:
1 Log in to the Sentinel Log Manager as an administrator.
2 Click rules in the upper left corner of the page.
Successfully Deleted Action
. The Event Message indicates the name and universally
message is displayed.
at the end of the message.
EMPTYTZ
Configuring Rules 125