Video Screencast Help

Search

Search results

I need a solution We have a custom collector with a rule that uses the option1 field, and after upgrading to 4.8 it is no longer triggering. It is my understanding that option1 through ...
Forum Discussion by ibutler | 20 Aug 2013 | 0 comments
With the additional functionality/integration between SSIM and GIN in 4.81, there’s an enhancement request we would like to make:   Periodically, we run into situations where we will max-out the resources of SSIM if we add large quantities of ...
Idea by Another IT Person | 10 Jun 2013 | 0 comments
I need a solution Hi! I´m kind of new using SSIM. I´m trying to create a rule that triggers and incident if somebody tries to log in any device at non working hours. Somebody ...
Forum Discussion by Rangie | 11 Apr 2013 | 2 comments
I need a solution We have several systems, which are primarily used by only one individual. We would like to be able to see if/when a "new" user logs in to that system. ...
Forum Discussion by mohpossum | 08 Feb 2013 | 5 comments
There should be a way to prioritize incidents without the asset being on asset table, for example if any machine was part of 2 or more incidents within a day then changing the severity to 5. (Security, Symantec Security Information Manager, ...
Idea by Vikram Kumar-SA... | 03 Feb 2013 | 0 comments
Would like to see more technology based generic rules in SSIM that would work regargless of any product used. Like Port Scans and Port Sweeps. BOT Rules needs to be modifed or more IRC ports added. Also if there can be addition on technology ...
Idea by Vikram Kumar-SA... | 03 Feb 2013 | 1 comment
I need a solution Trying to determine the proper regex format/strcuture that SSIM uses.  I have used regex in the past with much success in other applications and event filters. ...
Forum Discussion by Phife35 | 30 Jan 2013 | 6 comments
I do not need a solution (just sharing information) In In operation of the SSIM against a diverse range of equipment I have found the default rules have some things that should be ...
Forum Discussion by GarethR | 30 Jan 2013 | 8 comments
I need a solution I'm not sure this is possible but I'm canvassing opinion as I'm stuck. I need to write a rule for a many to one event followed by a single event (an ...
This issue has been solved
Forum Discussion by Mike Buckley | 03 Jan 2013 | 2 comments
I need a solution I like the idea of the System State Monitor. However, I need to generate an alert whenever an agent or SSIM goes offline for resolution, but enabling this will ...
Forum Discussion by GarethR | 05 Dec 2012 | 2 comments