Editing An Action - Novell SENTINEL LOG MANAGER 1.0.0.5 - ADMINISTRATION GUIDE 03-31-2010 Administration Manual

Repeat alerts interval (minutes): The repeat alert interval is the number of minutes
between repeating the
interval until sentinel link starts receiving the events again.
13 In the Maximum Event Queue Size (MB) field, specify the maximum event queue size value in
megabytes. The value must be between 0 and 2147483647.
The following options are enabled only when you specify a value in the Maximum Event Queue
Size (MB) field.
Drop OLDEST event when queue is full: Select this option to drop the oldest events in the event
queue when the value specified in the Maximum Event Queue Size (MB) field exceeds the limit.
Drop NEWEST event when queue is full: Select this option to drop the newest events when the
value specified in the Maximum Event Queue Size (MB) field exceeds the limit.
14 Select the Send alerts if events are dropped option to generate the alerts when the sentinel link
drops the received events because its queue is full. The internal event type for this alert is
.
DroppedEvents
15 Specify the maximum data rate value in kilobytes per second. The value must be between 0 and
2147483647.
16 Select one of the following options to specify the Event Forwarding Mode:
Forward Events Immediately: Select this option to forward the events immediately to the
Sentinel system.
Scheduled Event Forwarding: Select this option to schedule event forwarding. You can
specify the Time Of Day and Duration (in minutes) for each day of the week. The valid format
for the Time Of Day is hh:[mm] [am|pm]. The duration must be between 1 and 1440 minutes.
If you do not specify a time or the duration for any of the days of the week, the schedule is
considered to be 24 hours a day, seven days a week. It would be equivalent to the Forward
Events Immediately option.
Queue Events Only (do not forward): Select this option to stop forwarding events to the
destination Sentinel system. However, the integrator stores the events it receives in its queue
unless the queue has a size limit and has reached its maximum capacity.
This mode is useful if the destination Sentinel is down for maintenance or any network
problems persist in communicating with the Sentinel system that might not be fixed
immediately. In such situations, rather than continually trying to forward events, you can select
the Queue Events Only (do not forward) option to temporarily stop forwarding messages. After
the problems are resolved, you can re-enable event forwarding by selecting the Forward Events
Immediately or Scheduled Events Forwarding options.
17 Click Save. If the action is configured, a
The newly created action appears under the Actions tab.

7.2.2 Editing an Action

1 Log in to the Sentinel Log Manager as an administrator.
2 Click rules in the upper left corner of the page.
3 The Rules tab is displayed on the right pane of the page.
4 Select the Actions tab.
5 To change the action settings, click the edit link next to the action.
alert. The alert is sent repeatedly at this
NoEventsReceived
Successfully Added Action
message is displayed.
Configuring Rules 123