Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Prevent rule from triggering for X amount of time after first trigger

$
0
0

I have a rule that is set to alert if a file is created in a directory using FIM, but I'd prefer to not get an email for every single file that gets created if multiple are created in a short span of time. I can't do advanced thresholds due to having the rule set to alert for each instance of a file being created. Is it possible to delay future notifications until a certain timeframe has expired or not alert at all until a timeframe has passed?

 

Tim


Viewing all articles
Browse latest Browse all 5385

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>