Cisco CS-MARS-20-K9 - Security MARS 20 User Manual page 463

Chapter 22 Sending Alerts and Incident Notifications
For Syslog and SNMP, the Select (device) dialog box appears, as shown in
Figure 22-5
For Distributed Threat Management notification, the Select (IOS-IPS Devices) dialog appears (not
shown).
If you do not know the group to which a user or device belongs, select All from the dropdown list to
Tip
view all users or devices.
Click the check box next to the users or device you want to receive the notification, then click << Add.
Step 7
Your selections appear in the left-hand area. To remove items, Ctrl+click the items in the left-hand area,
then click Remove. The items are then deleted from the left-hand area.
If you are not adding a user, skip to Step 9. To add a new user, do the following substeps:
Step 8
Click Add.
a.
The User Configuration page appears in a separate window, as shown in
Enter the User Configuration information then click Submit.
b.
You are returned to the
For reference on user configuration fields, see the section,
Password, and Notification Information"
Add the new user to the recipient list as described in Step 7.
c.
Step 9 Click Submit.
You are returned to the
Repeat Step
Step 10
selected.
Click Submit.
Step 11
78-17020-01
Device Selection Page
Select Recipient Dialog
Alert Recipients
6 through Step 9 until you have assigned recipients to all the notification types you have
Box.
"Create a New User—Role, Identity,
Window.
User Guide for Cisco Security MARS Local Controller
Configure a Rule to Send an Alert Action
Figure 22-5.
Figure 22-6.
22-9