Events: Difference between revisions

From Edge Threat Management Wiki - Arista
Jump to navigationJump to search
(Created page with "<span style="display:none" class="helpSource events">Events</span> Events control the handling of "events" in Untangle. Within Untangle and the apps, when noteworthy actions...")
(No difference)

Revision as of 21:20, 17 May 2017

Events control the handling of "events" in Untangle.

Within Untangle and the apps, when noteworthy actions occur an "event" is logged. An event is an object that describes an action. For example, an HttpRequestEvent is logged when a client on the network makes an HTTP Request. A SessionEvent is logged when a PC creates a network connection.

The platform and all apps log events through the Event Manager. The Event Manager will do several things with each event:

  1. Evaluate Alert Rules and create, log, and send an alert if necessary.
  2. Evaluate Trigger Rules and take an action if necessary.
  3. Evaluate Syslog Rules and send a syslog message if necessary.
  4. Send the event to Reports, if installed, for saving in the reports database.

Alerts

Triggers

Syslog