Brocade Communications Systems WFT-2D User Manual page 1335

9. If you selected Custom Events in
10. If you selected Snort® Message in
11. Select Configure varbind filters to configure filters on varbind values (refer to
Configuring varbind filters
If actions must be confirmed based on a trap variable binding value (varbinds), select the
Configure varbind filters check box on the Events pane of the Add Event Action dialog box. This
enables you to configure filters on varbind values for this event action.
NOTE
Varbind filter configuration is only available if you selected Traps in
action definition"
The varbinds for the selected trap are listed in the Available Varbinds list, shown in
To configure varbind filters for an event action, complete the following steps.
1. Select Monitor > Event Processing > Event Actions.
2. Click Next to advance to the Events pane.
3. Select the varbind you want to include in the configuration and click the right arrow button to
4. For each varbind in the Selected Varbinds list, select one of the following operations for the
Brocade Network Advisor SAN User Manual
53-1003154-01
Event Category, Severity, Message ID, and Description Contains, as required.
use the arrow button to move them to the right.
To import Snort® rules, click the Import Snort® Rules button.
varbind filters" on page 1283 for more information). If you do not want to configure varbind
filters, click Next.
The Sources pane of the Add Event Action dialog box is displayed. You can use the Search tool
to search for sources.
on page 1280.
The Event Actions dialog box displays.
FIGURE 552
Available Varbinds and Selected Varbinds lists
move it to the Selected Varbinds list.
If you selected more than one trap and those traps have the same varbinds, then their
varbinds are listed in the Available Varbinds list. However, if the traps you selected have
different varbinds, the Available Varbinds list is empty.
condition you want to filter:
•
= – Equal to
•
!= – Not equal
step 4, click Next to accept the defaults; otherwise, select the
step 4, select the Snort® messages in the left table and
Event action definitions
"Configuring
step 4 of "Creating an event
Figure
32
552.
1283