Yes, But it is a little long to explain. Look at the advanced parameters of the events under event propagation. That is where you can reduce the number of alert (and data stored) per event. You'll have to use LogFiltered instead of LogWithoutRaw.
Jean Paul -----Original Message----- From: [EMAIL PROTECTED] On Behalf Of Mohr James Sent: Tuesday, November 16, 2004 12:44 PM To: [EMAIL PROTECTED] Subject: [ISSForum] Reducing the number of events Hi All! My boss wants to significantly reduce the number of events that are sent from a number of sensors. I know you can disable specific events, but is there anyway to say that you do not want any low priority events at all. I know how to change the view in the console to not display low severity, but I my boss does not want them to even get sent to the event collector. Is there any way to do this? Regards, Jim Mohr _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
