Configuring Outbreak Notifications in Trend Micro Apex One XG

You can configure your Trend Micro Apex One XG device to notify you of security risk outbreaks. Define an outbreak by the number of detections and the detection period.

Procedure

  1. Click Administration > Notifications > Outbreak.
  2. Click the Criteria tab.
  3. Type the number of detections and detection period for each security risk.
    Note: Notification messages are sent to an administrator when the criteria exceeds the specified detection limit.
    Tip: Trend Micro suggests that you use the default values for the detection number and detection period.
  4. To enable notifications, click the SNMP Trap tab, and select the Enable notification via SNMP Trap check box.
  5. Type the following message in the field:

    Number of virus/malware: %CV Number of computers: %CC

    Number of spyware/grayware: %CV Number of endpoints: %CC

    C&C callback detected: Accumulated log count: %C in the last %T hour(s)

  6. Click Save.

What to do next

Configure a log source in QRadar by using the SNMPv2 protocol. For more information, see SNMPv2 log source parameters for Trend Micro Apex One.