Previous Topic: Device and Port Activity ClassNext Topic: Device Connect Action


Device Alert Action

The Device Alert action expresses information about alert conditions related to a device. A device can be a hardware component like a network device (for example, a Router, Switch, Network Card, or Modem). Any type of alert about the Device can be mapped to this action. If this is an error condition and does not warrant immediate attention, then map to the Device Error action.

Information

Level

Source - User Information

Secondary

Source - Host Information

Tertiary

Source - Object Information

Tertiary

Source - Process Information

Tertiary

Source - Group Information

Tertiary

Dest - User Information

Secondary

Dest - Host Information

Primary

Dest - Object Information

Primary

Dest - Group Information

Tertiary

Agent - Information

Primary

Agent - Host Information

Primary

Event Source - Host Information

Primary

Event Source - Information

Tertiary

Event - Information

Primary

Result - Information

Primary

Result

event_result

event_severity

Success

n/a

n/a

Failure

F

6