Creating An Incident - Novell SENTINEL RAPID DEPLOYMENT 6.1 - 12-2009 User Manual

Table of Contents

Advertisement

4.6.5 Creating an Incident

Configure Action:Create Incident
Figure 4-6
NOTE: This type of action can only be used in Correlation deployments.
This action type create an incident whenever a correlated event fires. You can also initiate an
iTRAC
workflow process for remediation of that incident. For more information about the values
TM
of the following parameters, see
Responsible
Title
Category
Severity
Priority
State
(Optional) iTRAC Process list for configured iTRAC processes
(Optional) Action Plugin to Execute list for configured JavaScript actions
IMPORTANT: Do not enable the Create Incident action until the correlation rule has been tuned. If
the rule fires frequently, the system can create more incidents or initiate more iTRAC workflow
processes than desired.
Chapter 5, "Incidents Tab," on page
109.
Correlation Tab 107

Advertisement

Table of Contents
loading

This manual is also suitable for:

Sentinel rapid deployment 6.1

Table of Contents