Notifications

Use the Alerter and Alert Builder to create notifications. When email or other notifications are required for alerting actions, follow this procedure for each type of notification to be defined.

Alerter configuration

1. Before you choose alerting actions, you must be configure the email SMTP settings in theAlerter
2. Open the Alerter by clicking Protect > Database Intrusion Detection > Alerter.
3. Fill out the SMTP and/or SNMP information.
4. After filling out each section, click Test Connection, and verify that the connection is working. You will receive a message stating the connection is unreachable if the connection is not working.
5. Click Apply to save the configuration.
6. At a minimum, IP Address/Host name, port, and return email address must be specified.
7. Select Mail from the Notification Type menu. If the Severity of the message is HIGH, the Urgent flag is set.
8. Select a user (which can be an individual or group) from the Alert Receiver list. Additional receivers for real-time email notification are Invoker (the user that initiated the actual SQL command that caused the trigger of the policy) and Owner (the owner/s of the database). The Invoker and Owner are identified by retrieving user IDs (IP-based) configured by using the Guardium® APIs.
9. Click Add.

Build an alert

1. After configuring the Alerter, open the Alert Builder by clicking Protect > Database Intrusion Detection > Alert Builder.
2. Fill out the information in the Settings, Alert Definition, Alert Threshold, and Notification sections and click Apply.
3. Choose who will receive the notifications by clicking Add Receiver.. and choosing a user.