Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Help troubleshooting duplicate email alerts

$
0
0

Curtis, Thank you for the wonderful response.

 

I did follow your suggestion for nDepth to see which ones were sending out emails. However, it did not return any results. Here is a screen shot:

ndepth.JPG

I ran it for each time frame from 2 hours to a week with zero results. Perhaps I did something wrong?

 

Anyway, after thinking about what you said "The super easy way would be "Turn off three of the rules", I think I will discuss this with my team and see what we actually need alerts for (since all events will be in the database anyway). We may only need the Added to a group and User was Created or deleted setup as alerts.


I agree with the thought of getting alerted too much rather than not enough, but management wants to be on the mailing list for these alerts and I do not wish to have their mailboxes explode with thousands of alerts.(we have 5000+ users and this will generate too many emails daily)


I will evaulate what we really need alerting for and setup my rules accordingly.



Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>