Adding or editing rules to discard alerts
|Article:HOWTO64045|||||Created: 2011-12-20|||||Updated: 2011-12-20|||||Article URL http://www.symantec.com/docs/HOWTO64045|
You may need to delete incoming alerts under certain conditions. Or, you may want to delete duplicate alerts. In the Event Console Alert Rule Settings page, you can create an alert matching rule to discard the alerts that meet your criteria. These alerts are removed as soon as they are received and are not imported into the Configuration Management Database.
To optimize performance of the platform, and Notification Server in particular, you should create discard rules to remove redundant alerts. The Discarding Rules tab lets you configure multiple conditions for the incoming alerts that the system should discard.
See About alerts.
Filtered alerts are never stored in the alert database and are unavailable when reports are generated. If you want to store alerts but do not want to display them in the Event Console, hide them instead.
To add or edit a rule to discard an alert
Article URL http://www.symantec.com/docs/HOWTO64045