Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Getting Started > Configuring system alerts > Alert events
Alert events
Administrator Help | Forcepoint Email Security | Version 8.4.x
To ensure that administrators are notified of system events, like a database download failure or a subscription that is about to expire, you can configure system alerts to be distributed by email, pop-up message, or through your SNMP Trap system.
Use the Settings > Alerts > Enable Alerts page to select the method used to send these alerts to Forcepoint Email Security administrators. See Enabling system alerts for information.
Use the Settings > Alerts > Alert Events page to select categories of alerts to be delivered. Indicate how you want the alerts delivered (email, pop-up, or SNMP).
Alerts in the following event categories can be sent:
*
Subscription expiration
*
Email system events
*
Log Server and Log Database events
*
Mail queue events
*
Email analysis events
*
Encryption and decryption events
*
Appliance cluster configuration events
*
User directory server events
*
Email hybrid service operation events
*
Signature update events
*
SIEM server events
*
Personal Email Manager server events
For each event type in the Alerts list, mark the check boxes for the desired delivery methods. Marking the check box in the column heading for each alert delivery method selects all the event types in that column. You must have enabled a delivery method in the Enable Alerts page in order to select that method for an event type.
In some cases, you can configure threshold values to trigger the delivery of an alert. The following alert events allow you to set such values:
*
Inbound undelivered email event notifications
*
Work queue growth rate notifications
*
Exception queue event notifications
Alerts are sent at 30-minute intervals when the configured threshold is exceeded.
Inbound undelivered email event notifications
You can set a frequency threshold for the inbound undelivered email events alert type. This setting triggers an alert notification after a specified number of inbound connection errors occurs on the mail server. Outbound traffic is not monitored for this alert.
Use the following steps to set thresholds for sending inbound undelivered email alerts:
1.
Click the Configure alert thresholds link to open a configuration dialog box.
2.
Enter the number of connection errors you want to trigger an alert notification (default is 1). The notification is sent at 30-minute intervals after the connections threshold is exceeded.
3.
Click the Configure backup destination address to send alerts when the mail server is down check box.
4.
Enter up to 3 email addresses different from your mail server address as backup alert email destinations.
5.
Click OK.
Work queue growth rate notifications
The work queue includes the following message types:
*
Incoming messages waiting for analysis
*
Messages waiting for delivery
*
Deferred messages waiting for subsequent delivery attempts
Use the following steps to set thresholds for sending alerts when the work queue growth rate threatens to exceed the queue size limit in a specified period of time:
1.
Click the Configure alert thresholds link to open a configuration dialog box.
2.
Select the alert sensitivity level, based on how much warning you want regarding the queue growth rate and the probability of reaching the work queue size limit:
*
High. Work queue capacity reached in less than 4 days (default)
*
Medium. Work queue capacity reached in less than 2 days
*
Low. Work queue capacity reached in less than 1 day
3.
Click OK.
Exception queue event notifications
The exception queue includes any message that currently cannot be delivered because it encountered an exception during message analysis. Use the following steps to set thresholds for sending alerts when exception queue capacity reaches a specified percentage:
1.
Click the Configure alert thresholds link to open a configuration dialog box.
2.
Select the percentage of queue capacity at which you want to be warned about exception queue size (50% to 90%; default is 90%).
3.
Click OK.
When you are finished enabling all alert types and notifications, click OK.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Getting Started > Configuring system alerts > Alert events
Copyright 2017 Forcepoint. All rights reserved.