Results 1 to 6 of 6
  1. #1
    Master Untangler lszalontai's Avatar
    Join Date
    Sep 2010
    Location
    Hungary
    Posts
    123

    Default Alert rule for penalty box event

    Hey Everyone,

    Latest UT build here. Among 'Alert Rules' there's a rule called 'Host put in penalty box" with a class named 'PenaltyBoxEvent':
    Capffture.PNG

    However when trying to edit the rule the class field is empty and there's no penalty box related class in the drop-down menu:
    Caffpture.PNG

    Frankly I don't remember if it's a custom rule or built-in. Any suggestion on how to create a rule which would notify me when a host is being tagged as 'penalty-boxed'?

    thanks!

  2. #2
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,747

    Default

    in 13.0 you want to do something like this:
    Attached Images Attached Images
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Master Untangler lszalontai's Avatar
    Join Date
    Sep 2010
    Location
    Hungary
    Posts
    123

    Default

    Perfect, thanks!

    Other question: how can I remove a tag manually? I saw the Jira thread for this is marked as resolved, but couldn't find the option.

  4. #4
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    9,195

    Default

    Go to Devices and look at the Tags column. Click on the tag you wish to remove will show a popup to add or delete tags.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  5. #5
    Master Untangler lszalontai's Avatar
    Join Date
    Sep 2010
    Location
    Hungary
    Posts
    123

    Default

    That's too bad - I have a L3 switch after UT so 'Devices' is empty for me (except for the L3).
    Is there a plan to implement this feature for the 'Hosts' table?

  6. #6
    Master Untangler lszalontai's Avatar
    Join Date
    Sep 2010
    Location
    Hungary
    Posts
    123

    Default

    One more thing: I penalty box bittorent users. In v12 the alert showed me the ID of the Bandwidth Control rule - like this:
    Host put in penalty box:
    192.168.162.48 penalty boxed because Bandwidth Control ( policy: 2 rule: 200006)


    V13 shows nothing usable in reports:

    {"timeStamp":"2017-06-15 12:55:27.527","address":"/192.168.161.62","oldValue":"","value":"penalty-box","class":"class com.untangle.uvm.HostTableEvent","key":"addTag","partitionTablePostfix":"_2017_06_15"}


    No luck in the alert email either:

    Host put in penalty box:
    Host Table Update [/192.168.161.53] addTag -> penalty-box

    Causal Event: HostTableEvent
    {
    "timeStamp": "2017-06-14 09:45:35.394",
    "address": "/192.168.161.53",
    "oldValue": "",
    "value": "penalty-box",
    "key": "addTag"
    }


    Any idea how to have an alert which would provide useful information on which rule were triggered?

    thanks!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2