Apply Alarm Sets

Security > Apply Alarm Sets

The Apply Alarm Sets page creates alerts in response to security protection alert conditions defined using Define Alarm Sets. The alarms sets are applied to selected machine IDs licensed to use Endpoint Security.

The list of machine IDs you can select depends on the machine ID / group ID filter and the scope you are using. To display on this page, machine IDs must have the Endpoint Security client software installed on the managed machine using the Security > Installation page.

The page provides you with four actions:

• Apply - Apply a selected alarm set to selected machine IDs.
• Remove - Remove a selected alarm set from selected machine IDs.
• Remove All - Remove all alarm sets assigned to selected machine IDs.

To Create an Alert

1. Check any of these checkboxes to perform their corresponding actions when an alert condition is encountered:
   • Create Alarm
   • Create Ticket
   • Run Script
   • Email Recipients
2. Set additional email parameters.
3. Select an alarm set.
4. Check the machine IDs to apply the alarm set to.
5. Click Apply to assign the alarm set to selected machine IDs.

To Cancel an Alert

1. Select machine ID checkboxes.
2. Click Remove to remove the assigned alarm set from selected machine IDs.

Options

• Create Alarm - If checked and an alert condition is encountered, an alarm is created. Alarms are displayed in Monitor > Dashboard List, Monitor > Alarm Summary and Info Center > Reporting > Reports > Logs > Alarm Log.
• Create Ticket - If checked and an alert condition is encountered, a ticket is created.
• Run Script after alert - If checked and an alert condition is encountered, an agent procedure is run. You must click the select agent procedure link to choose an agent procedure to run. You can optionally direct the agent procedure to run on a specified range of machine IDs by clicking this machine ID link. These specified machine IDs do not have to match the machine ID that encountered the alert condition.
• Email Recipients - If checked and an alert condition is encountered, emails are sent to the specified email addresses. Email is sent directly from the VSA to the email address specified in the alert. Set the From Address using System > Outbound Email.
• Select an Alarm Set - Select an alarm set to apply to selected machine IDs.

Table Columns

• (Check-in Status) - These icons indicate the agent check-in status of each managed machine. Hovering the cursor over a check-in icon displays the agent quick view window.

Online but waiting for first audit to complete

Agent online

Agent online and user currently logged on.

Agent online and user currently logged on, but user not active for 10 minutes

Agent is currently offline

Agent has never checked in

Agent is online but remote control has been disabled

The agent has been suspended

• (Select All Checkbox) - Click this checkbox to select all rows in the paging area. If checked, click this checkbox to unselect all rows in the paging area.
• Machine.Group ID - A unique machine ID / group ID / organization ID name for a machine in the VSA.
• Alarm Set - Lists the alarm sets assigned to each machine ID.
• ATSE - The ATSE response code assigned to machine IDs or SNMP devices:
  • A = Create Alarm
  • T = Create Ticket
  • S = Run Agent Procedure
  • E = Email Recipients
• Email Address - A comma separated list of email addresses where notifications are sent.