11.3 Assigning Actions to Events

  1. Access Event Actions in the Sentinel Main interface.

    For more information, see Accessing Event Actions.

  2. Perform a search.

    If you have not performed a search, you cannot execute an action.

  3. Select the events in the search to perform actions on.

  4. In the Actions field, select the desired action from the drop-down box.

    You can add or remove items from this list. For more information, see Configuring Event Actions.

  5. Click Execute.

  6. In the Results field, view the results of the action.