8.4 Configuring Event Actions

Administrators can control what actions can manually performed on events.

8.4.1 Creating a New Event Action

If you have imported new action plug-ins into Sentinel and you want to create an event action for the action plug-in:

  1. Access the Sentinel Control Center.

    1. Log in to the Sentinel Web interface:

      https://<IP_Address/DNS_Sentinel_server:8443>
      

      IP_Address/DNS_Sentinel_server is the IP address or DNS name of the Sentinel server and 8443 is the default port for the Sentinel server.

    2. In the tool bar, click Applications.

    3. Click Launch Control Center.

    4. Click Yes to accept the security certificate.

    5. Specify a username and password of a user that has rights to access the SCC, then click Login.

    6. Click Accept or Accept Permanently to accept the security certificate and display the SCC.

  2. Click the Configuration tab.

  3. From the menu, click Configuration > Event Actions Configuration.

  4. Click Add to add a new action.

  5. Use the following information to create the new event action:

    Name: Specify a unique name for the event action.

    Description: Specify a description for the new event action.

    Action: Select the desired action from the drop-down list.

  6. Click Add Action.

  7. Create a new action by following the instructions in Adding an Action in the NetIQ Sentinel 7.0.1 Administration Guide.

8.4.2 Cloning an Event Action

You can clone an existing event action add give it another name.

  1. Access the Sentinel Control Center. For more information, see Step 1 in Section 8.4.1, Creating a New Event Action.

  2. Click the Configuration tab.

  3. On the menu, click Configuration > Event Actions Configuration.

  4. Select an event action, then click Clone.

  5. Change the name to a unique name, then click OK.

8.4.3 Moving an Event Action

You can display the event actions in any order. The order in the Event Actions Configuration page is the order that is shown in the Sentinel Web interface.

To move event actions:

  1. Access the Sentinel Control Center. For more information, see Step 1 in Section 8.4.1, Creating a New Event Action.

  2. Click the Configuration tab.

  3. On the menu, click Configuration > Event Actions Configuration.

  4. Select the event action you want to move, then click Up or Down until the event action is in the correct location.

8.4.4 Deleting an Event Action

  1. Access the Sentinel Control Center. For more information, see Step 1 in Section 8.4.1, Creating a New Event Action.

  2. Click the Configuration tab.

  3. From the menu, click Configuration > Event Actions Configuration.

  4. Select the event action you want to delete, then click Delete.

  5. Click Yes to confirm the deletion.