Compliance Event Manager Alert Manager not writing WTO to console
search cancel

Compliance Event Manager Alert Manager not writing WTO to console

book

Article ID: 232576

calendar_today

Updated On:

Products

Compliance Event Manager

Issue/Introduction

Using Compliance Event Manager to write to the console when a certain list of TSS administrative commands are issued.

Created an event and entered all TSS commands they want to track. AND is used for each command. Added the event to an active policy set.

But none of the TSS commands entered is causing an alert to be triggered and the TSS commands is being written to the console.

Environment

Release : 6.0

Component : COMPLIANCE EVENT MANAGER

Resolution

Should use OR instead of AND as the boolean expression when entering the list of commands to get alerted for.

With AND, for the condition to be true, all the TSS admistrative commands added in the event must be entered all at once.

No one will ever be issuing all of the TSS administrative commands all at once.

With OR, only one command in their TSS administrative command list needs to be issued  for the condition to be true.