Each Event is assigned a severity level. The severity defines how urgent or critical an event is. Security events are classified by a severity ID of 1, 2, or 3. Operative events are classified by a severity ID of 6, 7, or 8. You can also configure a server or client action (such as executing a program or sending emails and SNMP traps) to be performed when the event occurs and specify whether a specific event or all events should be propagated to a Barracuda NG Control Center.
In this article:
Configure Event Settings
- Open the Eventing page (Config > Full Config > Box > Infrastructure Services).
- Click Lock.
- Specify your event settings.
- To search for a specific event, enter its ID number in the Lookup field at the bottom of the page.
- To edit an event, select it and then click Change. You can also double-click the event entry.
- Click Send Changes and Activate.
|Event ID||The event ID.|
|Description||The event description is written to the event monitor and to logging facilities and is sometimes extended by additional information in case the event may be triggered by multiple processes.|
|Severity ID||The severity level that has been assigned to the event. Severity categories range from informational events to security events.|
|Notification ID||The effective notification setting that applies to the event.|
|Comment||The notification description.|
|Persistent||To prevent events from being forwarded multiple times, select this check box. Each event is only forwarded to the Barracuda NG Control Center once, even if it occurs multiple times. The event can only be forwarded to the Barracuda NG Control Center again after it is deleted. This setting is only of interest on Barracuda NG Control Center-administered systems.|
|Propagate to CC|
To enable propagation of the event to a Barracuda NG Control Center, select this check box. This setting overrules any conflicting settings from the Severity tab.
|Drop Event||To drop the event so that it is not entered in the local database or propagated, select this check box.|
|Severity ID||The severity ID. When assigning the severity to an event, select this severity ID in the event settings.|
|Propagate to CC||To enable the forwarding of events using this severity level to a Barracuda NG Control Center, select this check box. This setting may be overruled by customized settings for events from the Events tab.|
|Drop Event||If enabled, events using this severity are not stored in the local event database of the Barracuda NG Firewall or forwarded to a Barracuda NG Control Center.|
|Event must be confirmed||The assigned event remains in alarm status until it is confirmed by the administrator.|
From this tab, you can specify an action to be performed by the Barracuda NG Firewall when the assigned event occurs. After selecting the Enable check box, you can select and configure one of the following action types:
You can also specify how often the action is repeated until the event is confirmed by the administrator. Select the Repeat Every check box and then specify the interval in which the action is repeated. You can only specify this setting if the Event must be confirmed check box is also selected.
From this tab, you can enable an action to be performed by the MS Windows client that Barracuda NG Admin is running on when the assigned event occurs.
|Thresholds||From this tab, you can define how often the assigned event must occur in a specific time period before the specified server or client action for the notification is performed. To specify the thresholds for event notifications, you must also select the Activate Notification if any of these thresholds are reached check box.|
|Send Event to CC|
If enabled, Barracuda NG Firewalls that are managed by a Barracuda NG Control Center will forward their events to the Barracuda NG Control Center. This includes events that are generated by the Barracuda NG Control Center itself. This setting overrides conflicting settings from the Events or Severity tab.
|Silent Box||If enabled, event alarms are disabled but event collection is still performed.|
|Max Event Records|
Defines the maximum number of events that are displayed on the Events page. When this limit is reached, new events are not recorded on the Events page. It is recommended that you regularly delete old events and refer to the Logs and Statistics pages to view past events.