Resolution
goal
How do I edit or delete an existing rule in VigilEnt Security Agent for Cisco Secure IDS?
goal
How do I edit or delete a VigilEnt Security Manager (VSM) host where alerts appear?
fact
VigilEnt Security Agent for Cisco Secure IDS
fix
note
How do I edit or delete an existing rule in VigilEnt Security Agent for Cisco Secure IDS?
goal
How do I edit or delete a VigilEnt Security Manager (VSM) host where alerts appear?
fact
VigilEnt Security Agent for Cisco Secure IDS
fix
To edit or delete an existing rule:
- In the Rules pane, select the rule to edit. The selected rule's criteria and VigilEnt Security Manager (VSM) hosts are displayed.
- Right-click the criterion you want to edit and select Edit. The appropriate dialog box is displayed to edit the criterion's value.
- Edit the criterion's value, and click OK. The criterion is listed with its new value in the Criteria pane.
- To delete a criterion, right-click the criterion and select Delete. The criterion is deleted from the Criteria pane.
To edit or delete a VigilEnt Security Manager (VSM) host where alerts will appear when the conditions of the selected rule are met:
- To edit a VSM host, right-click the VSM host to be edited, and select Edit. The VSM Hosts dialog box is displayed for the selected VSM host.
- Edit the VSM host name and port number, and click OK. The edited VSM host is listed in the Alerts pane.
- To delete a VSM host, right-click the host and select Delete. The VSM host is deleted from the Alerts pane.
note
For information on how to create a new rule in VigilEnt Security Agent for Cisco IDS refer to the following knowledge base article.
https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB30597
For information on how to add a condition to a rule in VigilEnt Security Agent for Cisco IDS refer to the following knowledge base article.
https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB30599
Additional Information
Formerly known as NETIQKB30598