Creating Health Monitor Alerts
You must be an Admin user to perform this procedure.
When you create a health monitor alert, you create an association between a severity level, a health module, and an alert response. You can use an existing alert or configure a new one specifically to report on system health. When the severity level occurs for the selected module, the alert triggers.
If you create or update a threshold in a way that duplicates an existing threshold, you are notified of the conflict. When duplicate thresholds exist, the health monitor uses the threshold that generates the fewest alerts and ignores the others. The timeout value for the threshold must be between 5 and 4,294,967,295 minutes.
In a multidomain deployment, you can view and modify health monitor alerts created in the current domain only.
Before you begin
-
Configure an alert response that governs the Cisco Defense Orchestrator's communication with the SNMP, syslog, or email server where you send the health alert; see Cisco Defense Orchestrator Alert Responses.
Procedure
| Step 1 | Choose
System ( |
| Step 2 | Click Add. |
| Step 3 | In the Add Health Alert dialog box, enter a name for the health alert in the Health Alert Name field. |
| Step 4 | From the Severity drop-down list, choose the severity level you want to use to trigger the alert. |
| Step 5 | From the Alert drop-down list, choose the alert response that you want to trigger when the specified severity level is reached. If you have not yet configured the alert responses, click Alerts to visit the Alerts page and set them. |
| Step 6 | From the Health Modules list, choose the health policy modules for which you want the alert to apply. |
| Step 7 | Optionally, in the Threshold Timeout field, enter the number of minutes that should elapse before each threshold period ends and the threshold count resets. Even if the policy run time interval value is less than the threshold timeout value, the interval between two reported health events from a given module is always greater. For example, if you change the threshold timeout to 8 minutes and the policy run time interval is 5 minutes, there is a 10-minute interval (5 x 2) between reported events. |
| Step 8 | Click Save to save the health alert. |
)