sharfuddin2 Absent Member.
Absent Member.
328 views

Alert configuration to send email in Sentinel7.3


One of my SLM 1.2.x customer is about to upgrade to Sentinel 7.3.
Customer has configured quite a lot of Alerts that send email whenever
an event of Interest occur.

Now in Sentinel 7.3 I do not find a similar option. Routing rules does
not seem to provide the option to send email. I know via Co-rule we can
send emails but customer has Log Manager license means rather Sentinel
Enterprise.

Please help me understand.

Regards,


--
sharfuddin
------------------------------------------------------------------------
sharfuddin's Profile: https://forums.netiq.com/member.php?userid=1016
View this thread: https://forums.netiq.com/showthread.php?t=53350

0 Likes
6 Replies
ScorpionSting Absent Member.
Absent Member.

Re: Alert configuration to send email in Sentinel7.3


You need to create a "Send Email" action then also add that to the
correlation....

They're going to improve the Alert component in upcoming releases, but
7.3 is the first release with Alerts....


--
-"Also now available in 'G+'
(https://plus.google.com/u/0/112362149544381813153) and 'Website'
(https://www.isam.kiwi/) format".- 😉
------------------------------------------------------------------------
ScorpionSting's Profile: https://forums.netiq.com/member.php?userid=469
View this thread: https://forums.netiq.com/showthread.php?t=53350


Visit my Website for links to Cool Solution articles.
0 Likes
Knowledge Partner
Knowledge Partner

Re: Alert configuration to send email in Sentinel7.3

Yes, for Sentinel that's the easy solution, but does that work with
Sentinel 7.3 for Log Management which is, per the OP, what is licensed?

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
sharfuddin2 Absent Member.
Absent Member.

Re: Alert configuration to send email in Sentinel7.3


Log Manager license does not provide the Correlation feature, so
Co-rules are not an option here. Also Routing Rules do not provide the
option to send emails.

I opened an SR, and initially(within 4 hours of opening) I got the
following response:
>
> I see that by default sending email is not in the routing rules. I'll
> check if it can be configured for use with events outside correlation
> rules and will let you know.
>


then before day end, I got another response:>
> I checked my Sentinel 7.x servers and none of them has that action
> available in the Routing Actions, so I also checked the documentation
> for it and it states:
> "Not all Action Plug-ins support all modes – for example, the Send
> Email Action does not support being used as a Routing Action – but
> many do support more than one such mode."
> Quote taken from page 11 of this document:
> http://tinyurl.com/mlnfgwd
>
> So the Send Email action cannot be used as Routing Action in Sentinel
> 7.x.
>
> Hope that it answers your question although I understand that it is not
> the expected answer. If your customer would require this Action plugin
> to support the Routing Actions - let me please know and I can open an
> enhancement request with engineering for this feature.
>
>


Regards,


--
sharfuddin
------------------------------------------------------------------------
sharfuddin's Profile: https://forums.netiq.com/member.php?userid=1016
View this thread: https://forums.netiq.com/showthread.php?t=53350

0 Likes
sharfuddin2 Absent Member.
Absent Member.

Re: Alert configuration to send email in Sentinel7.3


finally I got the following response>
> Currently Send Email action in Sentinel 7.3 does not support use as
> Routing Action. As it was mentioned in the previous email - this is also
> documented in the manual to that Action. In Sentinel 7.x implementation
> of actions is slightly different than in SLM and may give greater
> control over them.
>
> Because upgrade from SLM 1.2 to SLM 7.3 in this case came with a loss of
> functionality that you relied on in the previous version I opened a case
> with engineering and I classified it initially as a bug (bug 928379)
> instead of an enhancement request. I will let you know as soon as I have
> some update on this issue from the development team.


Regards


--
sharfuddin
------------------------------------------------------------------------
sharfuddin's Profile: https://forums.netiq.com/member.php?userid=1016
View this thread: https://forums.netiq.com/showthread.php?t=53350

0 Likes
sharfuddin2 Absent Member.
Absent Member.

Re: Alert configuration to send email in Sentinel7.3


https://bugzilla.novell.com/show_bug.cgi?id=928379


--
sharfuddin
------------------------------------------------------------------------
sharfuddin's Profile: https://forums.netiq.com/member.php?userid=1016
View this thread: https://forums.netiq.com/showthread.php?t=53350

0 Likes
sharfuddin2 Absent Member.
Absent Member.

Re: Alert configuration to send email in Sentinel7.3


sharfuddin;256697 Wrote:
> https://bugzilla.novell.com/show_bug.cgi?id=928379


NetIQ Sentinel Support helped me finding the solution, here we go:
http://tinyurl.com/oftqak2


--
sharfuddin
------------------------------------------------------------------------
sharfuddin's Profile: https://forums.netiq.com/member.php?userid=1016
View this thread: https://forums.netiq.com/showthread.php?t=53350

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.