Configuring Individual Monitor Types

Each type of monitor that can be added to a policy module is configured differently depending on the type of monitor. After you have added the monitor to a policy module (see Adding Monitors to Policy Modules), you can configure the monitor type. For specific instructions about configuring each type of monitor, see:

• Configuring AMT Event Monitors

• Configuring Device Availability Monitors

• Configuring MBSA Reports Monitors

• Configuring Network Services Monitors

• Configuring Patch Status Monitors

• Configuring Performance Counter Monitors

• Configuring SCE Monitors

• Configuring SNMP Monitors

• Configuring SNMP from MIB Monitors

• CConfiguring SNMP Traps Monitors

• Configuring Syslog Messages Monitors

• Configuring Windows Events Monitors

• Configuring Windows Services Monitors

AMT Event monitors will only function correctly if the devices being monitored have successfully been added to the Intel® AMT device list.

1. Click Add Monitor.

2. From the Choose Monitor Type list, select AMT Events.

3. Click OK.

4. Click the Monitor tab.

5. In the Monitoring Rule section, type a monitor Title and Description in the boxes.

6. In the AMT Event Rule section, do the following:

   • Select the All check box to collect events from all sources, or deselect it and specify a source by the source in the Source box.

   • Select a severity level from the Severity list.

   • Type any text string to search for in the Details Search Text box (maximum 255 characters).

7. In the Event Collection section, select the Collect Events check box to activate this monitor, or deselect it to deactivate this monitor (useful when creating exceptions for monitors).

8. If you want to configure the alert rules at this time, then continue with the next step or click Save to close the dialog box.

1. Click the Alerts tab.

2. Click Add Alert Configuration.

3. In the Alert section, type an alert Title and Description in the boxes.

4. In the Alert Rules section, click Add Alert Rule.

5. In the AMT Events Rule Parameters section, do the following:

   • Select a source from the Event Source list. If you selected either Equal or Not Equal, type a value in the corresponding box.

   • Select a severity from the Event Severity list. If you selected either Equal or Not Equal, then select a value from the list that appears.

   • Type any text string to search for in the Details Search Text box (maximum 255 characters).

   • Click Save.

   • Repeat this step until all required alert rules have been defined.

6. If more than one alert rule has been defined, select either the Alert When Any Rule Conditions are Met or the Alert When All Rule Conditions are Met option button.

7. In the Alert Categories, Actions and Notifications section, do the following:

   • Click Add/Remove Category.

   • In the panel on the left side of the dialog box, select all the alert categories under which you want this alert to appear (in the Central Dashboard) and click Add.

   • If you want to remove any existing alert categories, in the panel on the right side of the dialog box, select the alert categories and click Remove.

   • Click OK.

8. Select the check boxes that correspond with any Alert Actions, Alert Notifications, or Escalation Notification you want to enable.
   For more information, see Setting Up Alert Actions.
   NOTE Self-Heal is not an available option.

9. Click Save.

10. Click Save.

Device Availability monitors will function for all discovered devices.

1. Click Add Monitor.

2. From the Choose Monitor Type list, select Device Availability.

3. Click OK.

4. Click the Monitor tab.

5. In the Monitoring Rule section, type a monitor Title and Description in the boxes.

6. If you want to configure the alert rules at this time, then continue with the next step or click Save to close the dialog box.

To configure the alert rules

1. Click the Alerts tab.

2. Click Add Alert Configuration.

3. In the Alert section, type an alert Title and Description in the boxes.

4. In the Alert Rules section, click Add Alert Rule, and do the following:

   • Select a period of time from the Trigger alert when Device is Down for list.

   • Click Save.

   • Repeat step a to b until all required alert rules have been defined.

5. If more than one alert rule has been defined, then select either the Alert When Any Rule Conditions are Met or the Alert When All Rule Conditions are Met option button.

6. In the Alert Categories, Actions and Notifications section, do the following:

   • Click Add/Remove Category.

   • In the panel on the left side of the dialog box, select all the alert categories under which you want this alert to appear (in the Central Dashboard) and click Add.

   • If you want to remove any existing alert categories, in the panel on the right side of the dialog box, select the alert categories and click Remove.

   • Click OK.

7. Select the check boxes that correspond with any Alert Actions, Alert Notifications, or Escalation Notification you want to enable.
   For more information, see Setting Up Alert Actions.

8. Click Save.

9. Click Save.

You can add a monitor that notifies you when a warranty is about to expire.

1. Click the Alerts tab.

2. Click Add Alert Configuration.

3. Type a title for the alert.

4. Optionally, type a description for the alert.

5. Click Add Alert Rule.

6. From the Trigger Type section, do the following:

   • To create an alert that notifies you when the vendor warranty expires, select the Vendor Warranty check box.

   • To create an alert that notifies you when the custom warranty expires, select the Vendor Warranty check box.

   • To create an alert when either warranty expires, select both check boxes.

7. In the Alert (days) box, type the number of days before or after the expiry that you want to be alerted.

8. Click Save.

9. Select the check boxes that correspond with any Alert Actions, Alert Notifications, or Escalation Notification you want to enable.
   For more information, see Setting Up Alert Actions.

10. Click Save.

11. Click Save.

MBSA Report monitors will only function correctly if the devices being monitored have WMI enabled.

1. Click Add Monitor.

2. From the Choose Monitor Type list, select MBSA Reports.

3. Click OK.

4. Click the Monitor tab.

5. In the Monitoring Rule section, type a monitor Title and Description in the boxes.If you want to configure the alert rules at this time, then continue with the next step or click Save to close the dialog box.

1. Click the Alerts tab.

2. Click Add Alert Configuration.

3. In the Alert section, type an alert Title and Description in the boxes.

4. In the Alert Rules section, click Add Alert Rule.

5. In the MBSA Category section, select either the All MBSA Categories or Choose MBSA Category option button.

   • If you selected All MBSA Categories, then select a score from the Score list.

   • If you selected Choose MBSA Category, then select the category from the MBSA Category list, and then select the score from the Score list.

   • If you selected Choose MBSA Category, the MBSA Check section appears.

   • Select either the All MBSA Checks from list or the Selected MBSA Checks from list option button.

     NOTE Use the CTRL key on the keyboard to select multiple checks.

   • Click Save.

6. Repeat steps 4 and 5 until you have defined all the alert rules.

7. If more than one alert rule has been defined, then select either the Alert When Any Rule Conditions are Met or the Alert When All Rule Conditions are Met option button.

8. In the Alert Categories, Actions and Notifications section, do the following:

   • Click Add/Remove Category.

   • In the panel on the left side of the dialog box, select all the alert categories under which you want this alert to appear (in the Central Dashboard) and click Add.

   • If you want to remove any existing alert categories, in the panel on the right side of the dialog box, select the alert categories and click Remove.

   • Click OK.

9. Select the check boxes that correspond with any Alert Actions, Alert Notifications, or Escalation Notification you want to enable.
   For more information, see Setting Up Alert Actions.
   NOTE Self-Heal is not an available option..

10. Click Save.

11. Click Save.

Network Services monitors will function for all discovered devices.

1. Click Add Monitor.

2. From the Choose Monitor Type list, select Network Services.

3. Click OK.

4. Click the Monitor tab.

5. In the Monitoring Rule section, type a monitor Title and Description in the boxes.

6. In the Network Service Rule section, do the following:

   • Select the service to monitor from the Network Services list.

   • The only option available from the IP Address list is ALL because there are no sites for the blueprint.

   • Type the port used by the service in the Port box.

   • Select a timeout value for the service from the Timeout list.

7. In the Scheduling section, do the following:

   • Select how often the monitor is run by selecting a value from the Polling Interval list.

   • In the Schedule box, by default, the monitor is set to Run Always. If you want to change the default, click Run Always to open the Select Interval dialog box.

   • In the Select Interval dialog box, select either the Daily Interval or Specific Interval option button and use the corresponding lists to define the monitoring schedule.

   • Click OK.

8. If you want to configure the alert rules at this time, then continue with the next step or click Save to close the dialog box.

1. Click the Alerts tab.

2. Click Add Alert Configuration.

3. In the Alert section, type an alert Title and Description in the boxes.

4. In the Alert Rules section, click Add Alert Rule.

   • Select a value from the Time Down before alerting list.

   • Click Save.

   • If required, repeat this step until all required alert rules have been defined.

5. If more than one alert rule has been defined, then select either the Alert When Any Rule Conditions are Met or the Alert When All Rule Conditions are Met option button.

6. In the Alert Categories, Actions and Notifications section, click Add/Remove Category.

   • In the panel on the left side of the dialog box, select all the alert categories under which you want this alert to appear (in the Central Dashboard) and click Add.

   • If you want to remove any existing alert categories, in the panel on the right side of the dialog box, select the alert categories and click Remove.

   • Click OK.

7. Select the check boxes that correspond with any Alert Actions, Alert Notifications, or Escalation Notification you want to enable.
   For more information, see Setting Up Alert Actions.

8. Click Save.

9. Click Save.

Patch Status monitors will only function correctly if the devices being monitored have had a Windows Update Agent Policy defined, and the devices are reporting into patch management successfully.

1. Click Add Monitor.

2. From the Choose Monitor Type list, select Patch Status.

3. Click OK.

4. Click the Monitor tab.

5. In the Monitoring Rule section, type a monitor Title and Description in the boxes.

6. If you want to configure the alert rules at this time, then continue with the next step or click Save to close the dialog box.

1. Click the Alerts tab.

2. Click Add Alert Configuration.

3. In the Alert section, type an alert Title and Description in the boxes.

4. In the Alert Rules section, click Add Alert Rule.

   • In the Patch Status section, select a patch status from the An alert will be triggered when any patch has a status of list.

   • Click Save.

   • If required, repeat this step until you have defined all the alert rules.

5. If more than one alert rule has been defined, then select either the Alert When Any Rule Conditions are Met or the Alert When All Rule Conditions are Met option button.

6. In the Alert Categories, Actions and Notifications section, click Add/Remove Category. The Add/Remove Alert Categories dialog box appears.

   • In the panel on the left side of the dialog box, select all the alert categories under which you want this alert to appear (in the Central Dashboard) and click Add.

   • If you want to remove any existing alert categories, in the panel on the right side of the dialog box, select the alert categories and click Remove.

   • Click OK.

7. Select the check boxes that correspond with any Alert Actions, Alert Notifications, or Escalation Notification you want to enable.
   For more information, see Setting Up Alert Actions.

8. Click Save.

9. Click Save.

Performance Counter monitors will only function correctly if the devices being monitored have WMI enabled.

1. Click Add Monitor.

2. From the Choose Monitor Type list, select Performance Counters.

3. Click OK.

4. Click the Monitor tab.

5. In the Monitoring Rule section, type a monitor Title and Description in the boxes.

6. In the Counter Selection section, do the following:

   • Select the performance object to monitor from the Performance Object list.

   • Select the instance from the Object Instance list.

   • Select the counter from the Counter list. If available, the Counter Help will appear, which provides a description of the counter.

7. In the Scheduling section, do the following:

   • Select how often the monitor is run by selecting a value from the Polling Interval list.

   • In the Schedule box, by default, the monitor is set to Run Always. If you want to change the default, click Run Always to open the Select Interval dialog box.

   • In the Select Interval dialog box, select either the Daily Interval or Specific Interval button and use the corresponding lists to define the monitoring schedule.