Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Trying to find a way to limit of email alerts

$
0
0

Yes, that's kind of a way I was thinking of doing it, however so far I have not been successful.  I created a rule that watches if the file monitoring rule fires 10 times in 30 seconds, and if it triggers it adds a specific value to a user defined group.  Then I modified my file monitoring rule to fire if that specific value is not in the user defined group.  The threshold rule works well and sets the flag correctly in the user defined group, but that doesn't make the file monitoring rule to stop firing.  The only way I can explain this is if this sort of condition in a rule doesn't work:

 

<Text constant> NOT IN <user defined groupe>

 

So still searching.

 

Thanks.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>