Configuring Surveillance Schedules

A surveillance schedule consists of one or more surveillance groups that you want to run on a host system during particular hours on particular days of the week. After a surveillance schedule has been created, it can be modified, copied or deleted later.




	NOTE: The `/etc/opt/ids/schedules/sample` directory contains read-only copies of the predefined schedules. Users who want to revert back to the original predefined schedules can manually copy them from `/etc/opt/ids/schedules/sample` into `/etc/opt/schedules`.

Creating a New Surveillance Schedule

This section describes about how to create a new surveillance schedule.

To create a new surveillance schedule, follow the steps:

Go to the Schedule Manager screen.
Create a name for the new surveillance schedule.
1. Press the New button on the Schedules panel. This opens the New Surveillance Schedule dialog box (Figure 5-2).
  Figure 5-2 New Surveillance Schedule Dialog
2. Enter a name in the input field. Valid characters are alphanumeric and underscore; the first character must be alphanumeric. Schedule names are case-sensitive. If you include invalid characters, you will be prompted to replace them with underscores.
3. Click OK to accept it and Cancel to exit the dialog box.
By default, a new schedule starts with all existing surveillance groups selected.
To set up the new schedule, follow the procedures in “Modifying a Surveillance Schedule”.

Copying a Surveillance Schedule

If an existing surveillance schedule is similar to what you want to create, you can copy the old one and change the copy.

To copy a surveillance schedule, follow the steps:

Go to the Schedule Manager screen.
Select the schedule you want to copy in the Schedules panel.
Create a name for the new surveillance schedule.
1. Press the Copy button on the Schedules panel. This opens the Copy Surveillance Schedule dialog box (Figure 5-3).
  Figure 5-3 Copy Surveillance Schedule Dialog
2. Enter a name in the input field. Valid characters are alphanumeric and underscore; the first character must be alphanumeric. Schedule names are case-sensitive. If you include invalid characters, you will be prompted to replace them with underscores.
3. Click OK to accept it and Cancel to exit the dialog box.
The new schedule’s groups, templates, and values are identical to the old schedule’s.
To revise the new schedule, follow the procedures in “Modifying a Surveillance Schedule”.

Modifying a Surveillance Schedule

To modify a surveillance schedule, follow the steps:

On the Schedule Manager screen select a schedule in the schedules panel.
If necessary, create new surveillance groups. For more information, see “Configuring Surveillance Groups” for details.
Select the Configure tab.
In the Select column of the Surveillance Groups panel, click the check boxes to mark the surveillance groups you want to include in the schedule. You can also use the Select All and Clear All buttons to mark all or none of the groups.
Select the Timetable tab.
Specify the times and days that you want each group in the surveillance schedule to run. For more information, see “Setting Surveillance Schedule Timetables”.
Select the Alert Aggregation tab. Configure alert aggregation by following the steps described under “Configuring Alert Aggregation”.
When your surveillance schedule is complete, it is a good idea to save it to the disk. For more information, see “Saving a Surveillance Schedule”.




	NOTE: The changes you make to a schedule are not propagated to any agent host until you activate it from the System Manager screen. If you modify a running schedule, you need to activate the schedule again to apply the changes.

Renaming a Surveillance Schedule

To rename a surveillance schedule, follow the steps:

On the Schedule Manager screen, select the schedule in the Schedules panel.
Open the Rename Surveillance Schedule dialog box (Figure 5-4) by performing one of the following tasks:
- Click the Rename button in the Schedules panel
  This only changes the names of the schedule and its disk file. The schedule is not saved to disk.
- Choose File >Save Selected Schedule As
  This changes the schedule and file names, and saves the schedule to the disk.
Figure 5-4 Rename Surveillance Schedule Dialog
Edit the name in the input field. Valid characters are alphanumeric and underscore; the first must be alphanumeric. Schedule names are case-sensitive. If you include invalid characters, you will be prompted to replace them with underscores.
Click OK to change the name. Click Cancel to leave the name unchanged.

Deleting a Surveillance Schedule

This section describes about how to delete a surveillance schedule.




	NOTE: You cannot delete any predefined schedule, distributed with HP-UX HIDS. For more information, see “Predefined Surveillance Schedules and Groups”.

To delete a surveillance schedule, follow the steps:

On the Schedule Manager screen select a schedule in the Schedules panel.
Click the Delete button in the Schedules panel. This displays the Confirm Deletion dialog box.
Click Yes to delete the schedule, and No to retain the schedule.

Undoing and Redoing Changes

The Undo and Redo buttons allow you to navigate among the changes you have made to schedules, groups, or template properties. Undo backs up through a list of your recent changes. Redo reverses the Undo, moving forward through the undone changes. The buttons are disabled when you reach the end of the changes list.




	NOTE: When you click Undo or Redo, the template highlight bar is moved to the top of the list. If you switch to the Timetable tab, the change list is cleared and the buttons are disabled out when you return to the Configure tab.

Saving a Surveillance Schedule

After a surveillance schedule has been created or modified, it is a good idea to save it to disk. This provides security against system failures. If you do not save it manually, it is saved automatically when you exit from the System Manager screen.

To save a surveillance schedule, follow the steps:

On the Schedule Manager screen select the schedule in the Schedules panel.
Select the schedule in the Schedules panel.
Save the schedule by using one of the following options:
- Click the Save button
- Choose File > Save Selected Schedule