8.3 Configuring Actions
An event is delivered to one or more channels when it meets the criteria specified by one of the
rules. Before the events can be output to a channel, the action to send to that channel must be
configured with the appropriate connection information (and authentication credentials, if needed
for the SMTP relay). The Identity Audit system can have only one configured connection per action
type (for example, all events that are written to a file must be written to the same file).
Section 8.3.1, "Send to E-Mail," on page 64
Section 8.3.2, "Send to Syslog," on page 65
Section 8.3.3, "Write to File," on page 65
8.3.1 Send to E-Mail
To configure the Send to e-mail action, you need the connection information for an SMTP relay (IP
address and port number), and the To and From addresses. You can send to more than one e-mail
address by entering a comma-separated list.
NOTE: To avoid overwhelming your SMTP relay or e-mail recipients, this action should only be
used with rules that generate a low volume of events.
This SMTP relay configuration is also used to deliver reports to users.
1 Log into Identity Audit as an administrator.
2 Click Rules in the upper right corner of the page.
3 Click Configuration.
4 Under e-mail, enter the name and port of an available SMTP relay. If desired, click Test to
validate the hostname or IP address, port, username, and password fields.
The Test button does not actually send a test e-mail message.
5 If the SMTP relay requires authentication, specify a username and password.
6 Specify an address from which the e-mail messages will come.
7 Specify one or more e-mail addresses, separated by commas.
8 Click Save.
64
Identity Audit Guide
Need help?
Do you have a question about the IDENTITY AUDIT 1.0 - GUIDE and is the answer not in the manual?