EvenLog users can view and EventLog administrator can add, edit or delete alarms.
To configure EventLog alarms, go to Settings > EventLog Settings > Alarms.
To add a new alarm in EventLog:
If you do not define a value to a certain criterion, that criterion will not be included in the Alarm condition.
Screenshot above shows an example of an Alarm confguration. This alarms will trigger if syslog message is sent from 147.91.7.65, with severity level 3 and message containing Authentication failure. |