Event Actions
All event actions filter based on event types. For instance, you can choose to only get an alert for intrusion detection events you’ve set at the warning or error level.
Alert
Receive an alert in the Conductor or email.
- Alert level:
- Can be info, warning, or error. You can filter alerts based on level and have only certain alert levels sent out in email.
- Show alert on dashboard:
- Disable if this alert should not be shown on the dashboard
- Admins to receive this alert:
- By default, all system administrators receive the alert. Select specific people or people groups to restrict who receives the alert.
Enable/Disable
Enable or disable the monitorable. For example, can be used to automatically disable Airwall Edge Services that have triggered an error level intrusion detection.
- Apply this action to something other than the monitored object:
- Apply the operation to something else
- Operation to perform:
- Enable or disable
- Target:
- What to apply the operation to.
HTTP call
Make an HTTP call. Can use templated values from the monitor to customize the call. Can be used to integrate monitors with an external service.
- URL / IP address:
- Server to make HTTP call against.
- Body:
- HTTP body. Only applies to HTTP methods that can have a body.
- HTTP method:
- The HTTP method to use: GET, POST, PUT, PATCH, or DELETE.
- SSL verification:
- Verify the authenticity of the SSL cert for HTTPS requests.
- Headers:
- HTTP headers to include in requests. Headers are in the format 'Content-Type:application/json' (without quotation marks) and comma-separated to include more than one.
Reboot
Reboot the monitorable.
- Apply this action to something other than the monitored object:
- Apply the operation to something else
- Target:
- What to apply the operation to
Tag add/remove
Add or remove a tag or tags from the monitorable. May also be applied to system objects with a different tag.
- Add:
- Tags to add
- Remove:
- Tags to remove
Tag enable/disable
Enable and / or disable system objects with a tag. For example, all objects with the tag “tempered” can be enabled if this action is performed.
- Enable:
- Enable any system objects with these tags.
- Disable:
- Disable any system objects with these tags.