How do I edit or delete an existing rule in VigilEnt Security Agent for Cisco Secure IDS? (NETIQKB30598)

goal
How do I edit or delete an existing rule in VigilEnt Security Agent for Cisco Secure IDS?

goal
How do I edit or delete a VigilEnt Security Manager (VSM) host where alerts appear?

fact
VigilEnt Security Agent for Cisco Secure IDS

fix

To edit or delete an existing rule:

1. In the Rules pane, select the rule to edit. The selected rule's criteria and VigilEnt Security Manager (VSM) hosts are displayed.
2. Right-click the criterion you want to edit and select Edit. The appropriate dialog box is displayed to edit the criterion's value.
3. Edit the criterion's value, and click OK. The criterion is listed with its new value in the Criteria pane.
4. To delete a criterion, right-click the criterion and select Delete. The criterion is deleted from the Criteria pane.

To edit or delete a VigilEnt Security Manager (VSM) host where alerts will appear when the conditions of the selected rule are met:

1. To edit a VSM host, right-click the VSM host to be edited, and select Edit. The VSM Hosts dialog box is displayed for the selected VSM host.
2. Edit the VSM host name and port number, and click OK. The edited VSM host is listed in the Alerts pane. 
3. To delete a VSM host, right-click the host and select Delete. The VSM host is deleted from the Alerts pane.

note

For information on how to create a new rule in VigilEnt Security Agent for Cisco IDS refer to the following knowledge base article.

https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB30597

For information on how to add a condition to a rule in VigilEnt Security Agent for Cisco IDS refer to the following knowledge base article.

https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB30599

Formerly known as NETIQKB30598