Policy Tab

Define the Event Policy in the Event Policy tab. Most configuration steps occur in the Policy tab. You define system components, such as SmartEvent Correlation Unit, lists of blocked IP addresses and other general settings.

The types of events that SmartEvent can detect are listed here, and sorted into a number of categories. To change each event, change the default thresholds and set Automated Responses. You can also disable events.

The Policy tab has these sections:

• Selector Tree - The navigation pane.
• Detail pane - The settings of each item in the Selector Tree.
• Description pane - A description of the selected item.

You can edit the event policy in one of these ways:

• Fine-tune the Event Policy
• Change the existing Event Definition to see the events that interest you
• Create new Event Definitions to see the events that are not included in the existing definitions

Save Event Policy

Modifications to the Event Policy do not take effect until saved on the SmartEvent server and installed to the SmartEvent Correlation Unit.

To enable changes made to the Event Policy:

1. Click File > Save.
2. Click Actions > Install Event Policy.

Revert Changes

You can undo changes to the Event Policy, if they were not saved.

To undo changes: click File > Revert Changes.