05-26-2009 06:16 AM
Hi,
I need to create a rule where MARS can send an email to admin when any port is down
but when I try by shutting down the test port, MARS is firing system rule "Network config changes".
So I have two problems custom rule not firing and email alert.
email address is configured in action tab.
Thanx
Screen shot of custom rule is attached.
05-26-2009 08:29 AM
Hmm not it seems that rule is firing but still admin can not recieve email alert about that incident.
05-27-2009 01:53 PM
Can anything be emailed from the MARS box? Try scheduling a report to be run and have it sent to yourself. All I am suggesting is that you rule out whether your email server is not accepting mail from MARS.
Hope this helps.
05-28-2009 12:16 AM
As Paul stated, you first have to check if email notification is configured properly. For example you might need to Add the MARS IP address in your SMTP server to allow it to relay.
Then instead of trying this on a custom rule, take one of the built-in rules you know fires a lot on your network. 'Clone' it and add the email action to it. Everytime the incident fires you will see this 'Email Admin' action under the 'Actions' field on the 'Incidents' page.
Regards
Farrukh
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide