Management Tab Overview
Revised: March 14, 207, 78-17020-01
Use the management features in the Local Controller to assign: event, addressing, service, and user
information. This information is used in rules, queries, and to determine false positives.
Activating
In general, you need to activate changes in the Management tabs if the changes are part of a rule.
To activate a set of management additions or changes
When changes (or additions) are complete, activate them by clicking Activate.
Step 1
Figure 23-1
Event Management
To open the Event Management sub-tab, click the Management > Event Management tabs.
On the Event Management page, you can search and filter events and event groups, and work with
groups of events.
78-17020-01
Clicking the Activate Button
C H A P T E R
User Guide for Cisco Security MARS Local Controller
23
23-1