Configuring HTTP settings

To receive information about all events detected in the past 24 hours, enter:

hostname (config) # fenotify http default delivery daily-digest

To receive a daily notification for each entity that was the source of the event, enter:

hostname (config) # fenotify http default delivery daily-per-source

To receive an hourly notification for each entity that was the source of the event, enter:

hostname (config) # fenotify http default delivery hourly-per-source

To receive a notification every minute for each entity that was the source of the event, enter:

hostname (config) # fenotify http default delivery per-1min-per-source

To receive a notification every 5 minutes for each entity that was the source of the event, enter:

hostname (config) # fenotify http default delivery per-5min-per-source

To receive information about each event, sent when the event is triggered, enter:

hostname (config) # fenotify http default delivery per-event

To select Aruba as the provider, enter:

hostname (config) # fenotify http default provider aruba

To select the generic provider, enter:

hostname (config) # fenotify http default provider generic

To post notifications in JSON Concise format containing basic information such as alert type, ID, source IP, malware name, hostname, and alert URL, enter:

hostname (config) # fenotify http service <service_name> provider generic message format json-concise

To post notifications in JSON Extended format containing detailed information and abstracts including data-theft information (if any) and static-analysis details (JSON Extended provides all details about files and objects modified during analysis.), enter:

hostname (config) # fenotify http service <service_name> provider generic message format json-extended

To post notifications in JSON Normal format containing detailed information and abstracts such as alert type, ID, source IP, malware name, hostname, and alert URL without any redundant information, enter:

hostname (config) # fenotify http service <service_name> provider generic message format json-normal

To post notifications in Text Concise format containing basic information such as alert type, ID, source IP, malware name, hostname, and alert URL, enter:

hostname (config) # fenotify http service <service_name> provider generic message format text-concise

To post notifications in Text Extended format containing detailed information and abstracts including data-theft information (if any) and static-analysis details (Text Extended provides all details about files and objects modified during analysis.), enter:

hostname (config) # fenotify http service <service_name> provider generic message format text-extended

To post notifications in Text Normal format containing detailed information and abstracts such as alert type, ID, source IP, malware name, hostname, and alert URL without any redundant information, enter:

hostname (config) # fenotify http service <service_name> provider generic message format text-normal

To post notifications in XML Concise format containing basic information such as alert type, ID, source IP, malware name, hostname, and alert URL, enter:

hostname (config) # fenotify http service <service_name> provider generic message format xml-concise

To post notifications in XML Extended format containing detailed information and abstracts including data-theft information (if any) and static-analysis details (XML Extended provides all details about files and objects modified during analysis.), enter:

hostname (config) # fenotify http service <service_name> provider generic message format xml-extended

To post notifications in XML Normal format containing detailed information and abstracts such as alert type, ID, source IP, malware name, hostname, and alert URL without any redundant information, enter:

hostname (config) # fenotify http service <service_name> provider generic message format xml-normal