We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

EVENTS Tab

  • Last updated on

The Barracuda NextGen Admin EVENTS page lets you monitor and manage events generated by the Barracuda NextGen Control Center and F-Series Firewalls. To access the EVENTS page, click the EVENTS tab in the ribbon bar. For information how to configure eventing, see Events.

events.png

The events table displays events information in the following columns:

  • Event – The name of the event.
  • Event Time – The date and time the event was generated.
  • Desc – The event description.
  • Count – The number of times the event occurred.
  • From Box – (CC only) The name of the system that created the event.
  • Layer desc – The layer that the event occurs on.
  • Class desc – The class that the event belongs to.
  • Type – The event type.

On the Events page, the importance and type of each event is determined by its icon and the font that it is displayed in:

IconEvent Type
information.pngInformation
warning.pngWarning
error.pngError
notice.pngNotice
security.pngSecurity
Text TypeEvent Type
normal text (blue)
New and unread event.
normal text (black)
Uncritical or confirmed event.
bold text (black)

Indicates that changes were made to default configuration of the event. For more information, see How to Configure Basic, Severity, and Notification Settings for Events.

Acknowledging Events and Alarms

Some events, such as error events or events that are displayed in blue text, require acknowledgement. You can also determine if an event needs acknowledgment by double-clicking it to view its properties. When you acknowledge an event, it is then displayed in black normal or bold text. If an event has an alarm, you can also either reset or disable the alarm.

If an event must be confirmed and is in alarm condition, deleting the alarm will also delete the request for acknowledgement. If an alarm is stopped, any configured repeating server actions are also stopped.

To acknowledge an event that requires confirmation, right-click the event and select Send - Acknowledgement. Acknowledging the event also terminates any alarms (such as a sound playing or an email notification) that have been set for it.

  • To acknowledge an event and remove a warning icon from it, select Send - Reset Alarm.
  • To mark an uncritical event as read, select Send - Mark as Read.
  • To temporarily disable the event alarm, select Temporary Disable. The event is then displayed in italics.

Managing Events

To manage the list of events that are displayed, you can refresh the list automatically or manually, delete events, and specify which columns are displayed or hidden. To delete an event, right-click it and select Delete Event. To verify that an event has been properly deleted, refresh the event list. To automatically refresh the list of events in Live mode, click No Auto Refresh and then click Live.

Notification messages are only enabled in Live mode. This mode displays of the current event system status and enables pop-up windows and sound. To manually refresh the list of events, click Refresh. To hide and show columns, right-click the list of events and select Columns. In the Show / Hide Event Columns window, select the columns that you want to be displayed.

Filter Options

To filter the list of events that are displayed, click the Filter icon on the top right of the page. To enter values for a filter setting, click the setting button. For example, to enter a layer ID, click Layer ID. In the Add Criterion window, add the values to the setting list and then click Add. After adding all of the required values for the filter, click Activate.

event_filter.jpg

Viewing Event Properties

To view detailed information for an event, you can either double-click it or right-click it and select Properties. From the Page 1 tab, you can view the system, layer, class, and type for the event, as well as its event ID.

FieldDescription
BoxThe IP address of the system that created the event.
Layer

There are three layers:

  • 1—Boot layer.
  • 2—Box layer.
  • 3—Server/Service layer.
Class

There are there classes:

  • 1—Operative
  • 2—Resources
  • 3—Security
TypeThe event ID.

From the Page 2 tab, you can view the dates and times of when the event was confirmed, acknowledged, or had its alarm disabled. You can also view information about the administrator who confirmed the event.

  • by Admin – The administrator who confirmed the event. If the event is unconfirmed, this field is empty.
  • by Peer – The IP address for the workstation of the administrator who confirmed the event. If the event is unconfirmed, this field is empty.
  • Date – The date and time of when the event was read or confirmed. If the event is unconfirmed, this field is empty.
  • Insert – The date and time of when the event was generated.
  • Box – Internal system information related to the insert time (please ignore this value).
  • Update – The date and time of any status changes for the event, such as when it was acknowledged or marked as read.
  • Alarm – The date and time of when the alarm was sent.
  • t. disabled – The date and time of when the alarm was disabled temporarily.
Last updated on