Administrators can control what actions can manually performed on events.
If you have imported new action plug-ins into Sentinel and you want to create an event action for the action plug-in:
Access the Sentinel Control Center.
Log in to the Sentinel Web interface:
https://<IP_Address/DNS_Sentinel_server:8443>
IP_Address/DNS_Sentinel_server is the IP address or DNS name of the Sentinel server and 8443 is the default port for the Sentinel server.
In the tool bar, click
.Click
.Click
to accept the security certificate.Specify a username and password of a user that has rights to access the SCC, then click
.Click
or to accept the security certificate and display the SCC.Click the
tab.From the menu, click
> .Click
to add a new action.Use the following information to create the new event action:
Name: Specify a unique name for the event action.
Description: Specify a description for the new event action.
Action: Select the desired action from the drop-down list.
Click
.Create a new action by following the instructions in Adding an Action
in the NetIQ Sentinel 7.0.1 Administration Guide.
You can clone an existing event action add give it another name.
Access the Sentinel Control Center. For more information, see Step 1 in Section 8.4.1, Creating a New Event Action.
Click the
tab.On the menu, click Event Actions Configuration.
>Select an event action, then click
.Change the name to a unique name, then click
.You can display the event actions in any order. The order in the Event Actions Configuration page is the order that is shown in the Sentinel Web interface.
To move event actions:
Access the Sentinel Control Center. For more information, see Step 1 in Section 8.4.1, Creating a New Event Action.
Click the
tab.On the menu, click
> .Select the event action you want to move, then click
or until the event action is in the correct location.Access the Sentinel Control Center. For more information, see Step 1 in Section 8.4.1, Creating a New Event Action.
Click the
tab.From the menu, click
> .Select the event action you want to delete, then click
.Click
to confirm the deletion.