Cisco CS-MARS-20-K9 - Security MARS 20 User Manual page 460

Configure a Rule to Send an Alert Action
Figure 22-2
Step 3 Do one of the following five actions:
Remove an alert action currently applied to the rule.
1.
–
–
Apply an existing alert action to the rule.
•
–
–
Delete an existing alert action from MARS.
•
–
–
–
Edit an existing alert action.
•
–
–
Create a new alert action.
•
–
User Guide for Cisco Security MARS Local Controller
22-6
Action Selection Dialog
In the left-hand area, pick the alert actions to remove with Ctrl+Click, then click Remove >>.
The alert action is deleted from the left-hand area.
Proceed to Step 13 to complete the procedure.
In the right-hand area, click the check boxes of the alert actions you require, then click <<== .
The alert action appears in the left-hand area.
Proceed to Step 13 to complete the procedure.
Click the check box of the alert action in the right-hand area, then click Delete.
A delete verification window appears.
Click Yes.
The alert action is deleted from the right-hand area.
Proceed to Step 13 to complete the procedure.
Click the check box of the alert action in the right-hand area, then click Edit.
The Alert recipients page appears in a new window, as shown in
Proceed to Step 4 to complete the procedure.
Click Add.
The Alert recipients page appears in an a new window, as shown in
Chapter 22 Sending Alerts and Incident Notifications
Figure 22-3.
Figure 22-3.
78-17020-01