Setting up alerts | Online help - EventLog Analyzer

Setting up alerts

How to: Hint on setting up alerts 

First, always check if any of the predefined alert criteria would satisfy the requirement. Proceed with custom alerts only if the requirement is very peculiar.

 

  1. Log on to GUI ⇾ Go to the "Alerts" tab ⇾ click on "Add Alert Profile" at the right-top corner

  2. In this page, enter the Alert Profile Name (this cannot be edited in the future), choose Severity, and select the devices whose logs should be considered.

  3. In "Select alert" field:

    1. Under the "Predefined Alerts" tab, choose the appropriate "Alert log type" from the drop-down box, and the suitable criteria (If further filtering of the list of criteria is required, use the "Alert Category" drop-down box).

Note: Upon clicking on "Add Criteria at the right-bottom corner, the window will be redirected to the "Custom Alerts" tab to add additional criteria as required.

 

 

    1. Under "Compliance Alerts", the criteria are grouped based on the respective compliance.

    2. Under "Custom Alerts", the user can define criteria for his unique requirements. This option is very customizable that even a single keyword in the log can be used. Note: Using "AND" operand implies that both the criteria should be satisfied and using "OR" operand implies that at least one should be satisfied.

 

Note: Alternatively, the search results in the "Search" tab can be saved on a new Alert Profile directly. This method will also give a confirmation about the correctness of the criteria.

 

  1. Alert Format Message: The details in the alert results under the "Alert" tab depends on the Macro used in this option.

  2. In Advanced Configuration:

    1. Threshold: The alert profile will be triggered only if the given number of events occur within the given time.

    2. Time Range: Only the events generated during this period will be taken into account.

  3. Alert Notification: Email/SMS details should be configured here. Also, there is an option to choose when the alerts to be delivered.

Workflow: The help document is updated with all the details https://www.manageengine.com/products/eventlog/help/StandaloneManagedServer-UserGuide/IncidentManagement/incident-workflow.html

                  New to ADSelfService Plus?

                    • Related Articles

                    • What to do if the Alerts stopped triggering or is getting delayed?

                      Open the EventLog Analyzer GUI, go to the Alerts tab ⇾ click on "More tools" at the right-top corner and click on "Manage Profiles". Ensure the alert profile is enabled. Click on "Update" next to the Alert Profile name, ensure that the "Email ...
                    • Log collection failure alerts

                      Device down alert: When configured devices don't respond to pings from EventLog Analyzer, it implies either of the following: The selected Syslog devices are not sending logs to EventLog Analyzer. EventLog Analyzer has not collected logs from the ...
                    • Prerequisites to simulate Ransomware correlation rule in EventLog Analyzer

                      Prerequisites to simulate Ransomware correlation rule in EventLog Analyzer: 1) Ensure to add the target machine inside EventLog Analyzer(Product Configuration): Refer: Adding Windows Devices On adding a windows device, the default monitoring interval ...
                    • How to restore a backed up instance on a different server?

                      1. Copy the entire <EventLog Analyzer Home> directory to the new server. It is highly recommended that the new location be the same as the older one. Eg: If the product was installed on an old server in C:\ManageEngine\EventLog, please make sure you ...
                    • Efficient Solutions for Disk Space Management

                      Please gather the below details to narrow down the root cause of the issue: Build number: If the EventLog Analyzer GUI is accessible, log onto the GUI, click on ? at the right-top corner, and check the build number. If the EventLog Analyzer GUI is ...