RSA Admin

HowTo: Setup an alert for no logs received

Discussion created by RSA Admin Employee on Apr 10, 2008
Latest reply on Apr 1, 2009 by ksaunders

I have been having a problem with a set of Checkpoint firewalls not sending their logs.  I have been trying to figure out how to set up an alert that would send an email if Envision does not see a log entry from a specific firewall in XX hours?  Can anyone point me in the right direction?

 

I have setup up a couple of alerts, but they have been the type that look for a specific string.  Never done one like this before.

Outcomes