Web Gateway 7.1.5 Product Guide - McAfee

8
Monitoring
Error handling
Send SNMP trap and other rules
Always –> Continue — ...
The Send SNMP trap rule and other rules in the rule set are always executed when the rule set
criteria is matched. The rules use different events for taking measures to make the administrator
aware of the request overload.
Note: These rules are not enabled by default.
Log File Manager Incidents
This nested error handling rule set handles measures taken when an incident occurs that involves the
Log File Manager.
Nested error handling rule set — Log File Manager Incidents
Criteria — Incident.ID greater than or equals 501 AND Incident ID
less than or equals 600
The rule set criteria specifies that the rule set applies when the value of the Incident.ID property is
within the range of incidents that involve the Log File Manager.
The rule set contains the following rules:
Create notification message
Incident.ID equals 501 –> Continue — Set User-Defined.notificationMessage =
“A log file cannot be pushed. Please have a look at the mwg-logfilemanager errors log
(/opt/mwg/log/mwg-errors/mwg-logmanager.errors.log).”
The rule checks whether the value of the Incident.ID property is 501, which indicates that the Log
File manager could not push a log file. If this is the case, the rule uses an event to set a
user-defined property for sending a notification message to a string value that is the text of this
message.
The Continue action lets processing continue with the next rule.
Send SNMP trap and other rules
Incident.ID equals 501 –> Continue — ...
The Send SNMP trap rule and other rules in the rule set check the value of the Incident.ID property
in the same way as the Create notification message rule and use different events to take measures
if this value is 501.
Note: These rules are not enabled by default.
310 McAfee Web Gateway 7.1.5 Product Guide