Step By Step How to Create Email Alert for Detection Server Monitor Service is stopped

How to Create Email Alert for Detection Server Monitor Service is stopped

Symantec DLP 14.5

Note: Please see the attachement for full article with screenshots

Steps

1. Open Enforce Server console from browser then Click onSystem >System and Detectors > Alerts

3. Click on Add Alert

4. Enter the Alert name in Alert name field

5. Enter the Description in Description field

6. Click on Add Condition

7. Select Event Code in ConditionDrop down menu

8. Select Is Any Of for condition to apply

9. Enter the code for Monitor Service stop (You can find these event codes in System Serves and Detectors > Events as it show event codes whenever a specific event it records)

10. For a specific Detection Server Alert Click on Add Condition

11. Select Server and Detector and Is Any Of in Conditions and then Select the Specific Server you want to generate email alert for (If you do not select any specific server then It will give alerts if any one of detection server’s Monitor Service stops )

12. Enter the email addresses under Actions Send Email Notifications in Recipient(s) field (you can enter more than one email addresses by separating with comma)

13. Enter the max email notification you want to send in an hour in Max Per Hour field

14. Click on Save to save the Alert

    Test the Alert to confirm its working