KB 240106: Group Membership Templates don't trigger alert on certain types of group changes
Group Membership Template rules do not alert on some events based on predefined rule filter.
Issue: Template Rule and Monitor only filter on 4 group change events
Symptoms: Expected Alert on Group Membership Change not created
Cause: By default the Template filters on Events 632,633,660,661, we are adding events 655,656,665,666 to filter list in SP1
Scope: Rules & Monitors created with the Group Membership Templates
Product/s: Security Templates 3.0.6500.0
Resolution
Edit output created from Templates directly vs trying to edit the Template rule itself. The output Rule, Monitor and View are stored in the overrides MP, are unsealed and can be edited directly in Operations Manager Authoring console.
Tip: You can filter for any Secure Vantage Template object by searching for the keyword 'Template'.
See KB 540108 for instructions on how to edit monitoring templates after creation.
|