Selects which alerts that notifications are sent for.
Syntax
[no] fenotify rsyslog trap-sink <sink_name> prefer notification <event_type>
Parameters
no
The no form of this command disables rsyslog notification trap sinks.
sink_name
The name of the rsyslog notification trap sink.
event_type
Type of notification:
all-events—Notification of all events except riskware.all-riskware—Notification of riskware-object and riskware-callback events.domain-match—Notification of domain-match events.infection-match—Notification of infection-match events.ips-event—Notification of IPS events. Supported on IPS-enabled appliances only.malware-callback—Notification of malware-callback events.malware-object—Notification of malware-object events.riskware-callbackriskware-callback—Notification of riskware-callback events.riskware-objectriskware-object—Notification of riskware-object events.web-infection—Notification of Web-infection events.
Example
The following example enables notifications of riskware-object and riskware-callback events:
hostname (config) # fenotify rsyslog trap-sink rk prefer notification all-riskware
The following example enables riskware notifications for rsyslog traps:
hostname (config) # fenotify rsyslog trap-sink rk prefer notification riskware-object
hostname (config) # fenotify rsyslog trap-sink rk prefer notification riskware-callback
hostname (config) # fenotify rsyslog trap-sink rk prefer notification all-riskware
User role
Admin and Operator
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Malware Analysis: Before release 7.6. Riskware options were introduced in Release 7.9.1.
Email Security — Server: Before release 7.6. Riskware options were introduced in Release 8.0.0.
File Protect: Before release 7.6. Riskware options were introduced in Release 7.9.1.
Network Security: Before release 7.6. Riskware options were introduced in Release 7.9.1.