Managing Incident And Event Data - Symantec 10521146 - Network Security 7120 Administration Manual

Managing incident and event data

SNMP Initiation Request Failed: An error occurred while sending an SNMP
■
trap from Symantec Network Security.
Email Alert Failed: An error occurred while sending an email alert from
■
Symantec Network Security.
SNMP Alert Successful, but Truncated: An SNMP trap was successfully
■
sent by Symantec Network Security, but the message was too long and was
truncated.
SNMP Alert Failed: An error occurred while sending an SNMP alert from
■
Symantec Network Security.
Unable to Execute Custom Response Process: Failed to execute custom
■
response to an event.
Disk Space Warning: Symantec Network Security displays this event
■
whenever <100,000 blocks and <10% of disk space is available.
Failover Active: Symantec Network Security displays this event whenever a
■
software or appliance node with failover enabled becomes the active node.
Note: All users can view operational events at the top level. See
reference" on page 319 for more about permissions.
Because large chronological lists of events are difficult to humanly manage,
Symantec Network Security categorizes events into incidents with similar or
related characteristics, such as time, type, location, source, or destination. Using
real-time analysis and correlation in this way, Symantec Network Security
provides information about all incidents and events that occur in your network.
The Network Security console provides a way to mark the incidents that you
have read and add notes. You can save and print the data in several formats, and
copy and paste it into files or email.
Selecting columns
■
Selecting view filters
■
Marking and annotating
■
Saving, copying, and printing data
■
Emailing incident or event data
■
Monitoring
Managing incident and event data
"User groups
201