Cisco CS-MARS-20-K9 - Security MARS 20 User Manual page 457

Chapter 22 Sending Alerts and Incident Notifications
Table 22-2
some of these procedures are documented elsewhere in this user guide, they are duplicated here for your
convenience.
Table 22-2
Alert Related Procedures
Configure the E-mail Server Settings
Configure a Rule to Send an Alert Action
Create a New User—Role, Identity, Password,
and Notification Information
Create a Custom User Group
Add a User to a Custom User Group
Example 22-1
its attached XML data file. When compression is configured, the XML date file arrives as a GZIP
compressed file.
Note Alert notifications cannot be customized.
Example 22-1 MARS Notification by Email
-----Original Message-----
From: notifier.Latest@serviceprovider.cisco.com [mailto:notifier.MyLatest@cisco.com]
Sent: Monday, May 15, 2006 8:48 AM
To: Naliza Mahda (Nalmah)
Subject: Incident Notification (green, Rule Name: System Rule: CS-MARS Database Partition
Usage)
The following incident occurred:
Start time:
End time:
Fired Rule Id:
Fired Rule:
Incident Id:
For more details about this incident, please go to:
https://MyLatest/Incidents/IncidentDetails.jsp?Incident_Id=597842933
78-17020-01
provides links and description of related Alert Action configuration procedures. Although
Alert Notification Procedures
shows a typical email alert notification.
Mon May 15 08:47:26 2006
Mon May 15 08:47:26 2006
134473
System Rule: CS-MARS Database Partition Usage
597842933
Description
To send Email, SMS, and XML notifications,
MARS requires that you configure the E-mail
Server settings.
Complete this procedure to create or modify an
alert action.
Alert notifications can be sent only to user
accounts configured on MARS. A new user
account can be configured from the User
Management tab, or when creating an alert action
for a rule. This is where you enter the service
provider phone numbers and email addresses for
E-mail, SMS, Pager, and
Complete this procedure to create a MARS user
group other than the default MARS user groups.
Unlike default user groups, custom groups can be
edited.
Complete this procedure to include a newly
created user account into a MARS user group.
Example 22-2 shows an XML notification with
User Guide for Cisco Security MARS Local Controller
22-3