The EVENTS tab lets you monitor and manage events that are generated by your Barracuda NextGen Control Center and Barracuda NextGen F-Series Firewalls. For more information how to configured eventing, see How to Configure Event Notifications.
On the Events page, the importance and type of each event is determined by its icon and the font that it is displayed in:
| Icon | Event Type |
|---|---|
 | Information |
 | Warning |
 | Error |
 | Notice |
 | Security |
| Text Type | Event Type |
|---|---|
| normal text (blue) | New and unread event. |
| normal text (black) | Uncritical or confirmed event. |
| bold text (black) | Indicates that changes were made to default configuration of the event. For more information, see How to Configure Basic, Severity, and Notification Settings for Events. |
Acknowledging Events and Alarms
Some events, such as error events or events that are displayed in blue text, require acknowledgement. You can also determine if an event needs acknowledgment by double-clicking it to view its properties. When you acknowledge an event, it is then displayed in black normal or bold text. If an event has an alarm, you can also either reset or disable the alarm.
To acknowledge an event that requires confirmation, right-click the event and select Send - Acknowledgement. Acknowledging the event also terminates any alarms (such as a sound playing or an email notification) that have been set for it.
- To acknowledge an event and remove a warning icon from it, select Send - Reset Alarm.
- To mark an uncritical event as read, select Send - Mark as Read.
- To temporarily disable the event alarm, select Temporary Disable. The event is then displayed in italics.
Managing Events
To manage the list of events that are displayed, you can refresh the list automatically or manually, delete events, and specify which columns are displayed or hidden. To delete an event, right-click it and select Delete Event. To verify that an event has been properly deleted, refresh the event list. To automatically refresh the list of events in Live mode, click No Auto Refresh and then click Live.
Notification messages are only enabled in Live mode. This mode displays of the current event system status and enables pop-up windows and sound. To manually refresh the list of events, click Refresh. To hide and show columns, right-click the list of events and select Columns. In the Show / Hide Event Columns window, select the columns that you want to be displayed.
Filtering Events
To filter the list of events that are displayed, click Filter. To enter values for a filter setting, click the setting button. For example, to enter a layer ID, click Layer ID. In the Add Criterion window, add the values to the setting list and then click Add. After adding all of the required values for the filter, click Activate.
Viewing Event Properties
To view detailed information for an event, you can either double-click it or right-click it and select Properties. From the Page 1 tab, you can view the system, layer, class, and type for the event, as well as its event ID.
| Field | Description |
|---|---|
| Box | The IP address of the system that created the event. |
| Layer | There are three layers:
|
| Class | There are there classes:
|
| Type | The event ID. |
From the Page 2 tab, you can view the dates and times of when the event was confirmed, acknowledged, or had its alarm disabled. You can also view information about the administrator who confirmed the event.
- by Admin – The administrator who confirmed the event. If the event is unconfirmed, this field is empty.
- by Peer – The IP address for the workstation of the administrator who confirmed the event. If the event is unconfirmed, this field is empty.
- Date – The date and time of when the event was read or confirmed. If the event is unconfirmed, this field is empty.
- Insert – The date and time of when the event was generated.
- Box – Internal system information related to the insert time (please ignore this value).
- Update – The date and time of any status changes for the event, such as when it was acknowledged or marked as read.
- Alarm – The date and time of when the alarm was sent.
- t. disabled – The date and time of when the alarm was disabled temporarily.