KB 540102

KB 540102: How to override security alerting rules

Step-by-step process for applying overrides to Rules and Monitors. This can be used to enable/disable rules, change the Alert severity or targeted systems.

Applying Override Steps

  1. Open the Operations Manager console
  2. Go to 'Authoring' pane
  3. Expand the 'Management Pack Objects' container and select Rules or Monitors container
  4. Locate the specific Rule or Monitor to override.
  5. Right click the rule and select 'Overrides', then 'Override the Rule' and then 'For all objects of type: Secure Vantage Windows Servers'
  6. Configure override properties (Enabled, Severity or Priority) to values as desired.
  7. For the Management Pack section select the 'Secure Vantage Security Auditors Overrides Management Pack' (or a Management Pack of your choice)
  8. Click 'Ok' to apply the new Override setting and to close the Override Properties window

Tips

You can change the scope to the 'Secure Vantage Windows Servers' type to narrow down the list of objects.

Further instructions and samples for applying overrides can also be found in the Security Management Quick Start Guide

News & Events

Press Release 08/04/2009: Secure Vantage Releases Security Auditing SP2 for the Audit Collection Services (ACS)

Online Webcasts 06/08/2009: Download the ACS Master Class Series for free real world expert training on the Audit Collection Services.

Read more