07-06-2017 12:35 PM
I have configured Threat alerts to be emailed. This is working, however I'm getting information level alerts. I have setup a filter to only mail critical or high. I built this filter under objects/log forwarding, then log type threat. Is this the correct location? I would like to not see any log lower the medium level. How do I stop getting information alerts?
Thanks,
07-06-2017 12:38 PM
Can you post a screenshot of the way you have the log-forwarding configured. If configured correctly you shouldn't be getting anything that you haven't specified unless it's matching something else in your log-forwarding policy.
07-06-2017 01:51 PM
That's interesting, I don't see any reason why you would be getting informational alerts from what's on the screenshot. I might try reaching out to TAC and seeing if they can get it to mimic with their equipment.
07-06-2017 03:05 PM
Ok...that is what I was thinking as well. Below is a shot of the alerts I'm getting.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
