RSA Admin

Pre-Exisiting/Canned Alert Views

Discussion created by RSA Admin Employee on Apr 11, 2011

There's a lot of different canned reports for a ton of sources, but zero for Alert Views.


Anyone know if RSA or another place has some pre-made or canned views that can be imported?


This would be a huge help as creating alerts for non-windows server (IE. using an event ID) is a huge pain, for example, getting an alert when an ip goes over a bandwidth threshold. There's reports to call that up, but they seem to be generated from tables that can't be pulled in alert views.


Any help would be appreciated, thanks!