Editing Event Sources

Event sources are the occasions and conditions when vWAF alerts you via the configured Event Destinations (see also Configuring Alerts).

You can configure any number of event sources.

Adding event sources

  1. If you want to add a global event source: Select the menu item Administration > Alerting Configuration.
    If you want to add an application-specific event source: In the navigation area, select the application and activate the Configuration | Alerting Configuration tab.
  2. Activate the Event Sources tab.

  3. From the selection list under Add Event Source, select the event source to be added. Details on the individual sources can be found in the reference section of this documentation under Event Sources.
  4. Click the Add button. The event source just added then appears highlighted on the list.

The event source initially inherits the attributes preset on the system.

ATTENTION
By default, the event source isn’t yet linked to any event destination group. This means that no alerts are triggered whatsoever. To configure the event source in detail and to link it to an event destination group, you need to edit the event source.

You can add the same event source more than once. You may use this to trigger events based on different parameters and to send them to different event destinations.

Editing an event source

  1. If you want to edit a global event source: Select the menu item Administration > Alerting Configuration.
    If you want to edit an application-specific event source: In the navigation area, select the application and activate the Configuration | Alerting Configuration tab.
  2. Activate the Event Sources tab.
  3. In the Action column, click the relevant Edit icon.

    Now the attributes of the event source are shown.

    In the Inheritance column you can see whether the values given under Value have been inherited as system-based presets (Inherited entry) or have been modified individually (Local entry).

    The Owner column shows the username of the administrator who made that setting. The BUILT-IN entry identifies the default values.

    The Last Commit column shows whether and when a setting has already been committed.

    Detailed information on the attributes of the individual event sources can be found in the reference part under Event Sources.

    On the bottom of the list, link the event source to an event destination group. The selection list labeled Select a destination group lists all event destination groups that have been created for the application or on global level. (For information on how to create event destination groups, see Editing Event Destinations.)

  4. Make the required settings and then click the Save button.

Deleting an event source

  1. If you want to delete a global event source: Select the menu item Administration > Alerting Configuration.
    If you want to delete an application-specific event source: In the navigation area, select the application and activate the Configuration | Alerting Configuration tab.
  2. Activate the Event Sources tab.
  3. In the Action column, click the relevant Delete icon for the event source that you want to remove.