KB 540108: How to edit monitoring templates after creation
After creating a new audit scenario using the Security MP Templates it may be necessary to modify the rule configuration. Customers can either create a new rule using the Template or edit the Template output (rules, monitor and view) directly.
Download Video: Security Management - Security MP Templates Overview
Editing a Security Template
When using Security Templates the wizard will dynamically create a Rule, Monitor and View for the control scenario. You can edit the output directly (Rule, Monitor or View) but you cannot edit the Template itself. The output Rule, Monitor and View are stored in the overrides MP which is unsealed and can be edited directly in Operations Manager Authoring console.
- Open Operations Manager console
- Go to 'Authoring' pane
- Select 'Management Pack Objects'
- Select Monitors or Rules, note Monitors are for Health monitoring only while Rules generate the Alerts
- Go to or search for objects you want to edit
- Double-Click or Right-Click object and select Properties
- Select the 'Configuration' tab
- In the Data Source section, select 'Edit'
- Edit Expression as desired
- Click 'OK' to save Expression changes, Click 'Ok' to save object changes.
Tips
Object names will always include 'Template Created' in suffix of name
|
|
|
|