App Control: How to Create an Alert for Automatic Log Capture
search cancel

App Control: How to Create an Alert for Automatic Log Capture

book

Article ID: 288318

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To create an Alert for when Agent Logs have uploaded, such as after an Automatic Log Capture.

Environment

  • App Control Console: All Supported Versions
  • App Control Agent: All Supported Versions

Resolution

  1. Log in to the Console and navigate to Tools > Alerts > Add Alert.
  2. Use the following information:
    • Alert Name: Agent Logs Available (or something memorable)
    • Status: Enabled
    • Type: Event Alert
    • Event Properties:
      • Subtype > is: Agent diagnostics available
      • Source > is: relevant Computer
  3. Click Create.
  4. Add Subscriber Email Address if desired.
  5. Click Save.

Additional Information

  • This can be beneficial when Automatic Log Capture has been configured.
  • The Filter Policy could be used instead of Source, depending on the scenario.