Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual page 196

188 C R
ONFIGURING ULES
Table 9-3 Event Rule Response Parameters (continued)
Parameter
Dispatch New Event
Event Name
Event Description
Offense Naming
Severity
Credibility
Relevance
High-Level Category
Low-Level Category
STRM Administration Guide
Description
Select the check box to dispatch a new event in
addition to the original event, which will be
processed like all other events in the system.
The Dispatch New Event parameters appear when
you select the check box. By default, the check box
is clear.
Specify the name of the event you wish to display in
the Offense Manager.
Specify a description for the event. The description
appears in the Annotations of the event details.
Select one of the following options:
This information should contribute to the
•
name of the associated offense(s) - Select this
option if you wish the Event Name information to
contribute to the name of the offense(s).
This information should set or replace the
•
name of the associated offense(s) - Select this
option if you wish the configured Event Name to
be the name of the offense(s).
This information should not contribute to the
•
naming of the associated offense(s) - Select
this option if you do not wish the Event Name
information to contribute to the name of the
offense(s).
Specify the severity for the event. The range is 1
(lowest) to 10 (highest) and the default is 1. The
Severity appears in the Annotation of the event
details.
Specify the credibility of the event. The range is 1
(lowest) to 10 (highest) and the default is 10.
Credibility appears in the Annotation of the event
details.
Specify the relevance of the event. The range is 1
(lowest) to 10 (highest) and the default is 1.
Relevance appears in the Annotation of the event
details.
Specify the high-level event category you wish this
rule to use when processing events.
For more information on event categories, see the
Event Category Correlation Reference Guide.
Specify the low-level event category you wish this
rule to use when processing events.
For more information on event categories, see the
Event Category Correlation Reference Guide.