Setting Launch Interval And Repeat Count - Watchguard Firebox X1000 User Manual

Customizing Logging and Notification by Service or Option

Setting Launch Interval and Repeat Count

Two parameters work in conjunction with the Event Pro-
cessor Repeat Interval to control notification timing:
Launch Interval
Repeat Count
As an example of how these two values interact, suppose
you have set up notification with these values:
• Launch interval = 5 minutes
• Repeat count = 4
A port space probe begins at 10:00 a.m. and continues once
per minute, triggering the logging and notification mecha-
nisms. Here is the time line of activities that would result
from this event with the above timing and repeating setup:
1
10:00–Initial port space probe (first event)
2 10:01–First notification launched (one event)
3
10:06–Second notification launched (reports five
events)
4
10:11–Third notification launched (reports five
events)
5
10:16–Fourth notification launched (reports five
events)
The time intervals between activities 1, 2, 3, 4, and 5 are
controlled by the launch interval, which was set to 5 min-
utes.
User Guide
The minimum time (in minutes) between separate
launches of a notifier. Set this parameter to prevent
the launch of several notifiers in response to similar
events that take place in a short amount of time.
The threshold for how often an event can repeat
before the Firebox activates the special repeat
notifier. The repeat notifier creates a log entry
stating that the notifier in question is repeating.
Notification repeats only after this number of
events occurs.
217