Alert for specific profiles

Question

Hi,

This should be a simple question, and I'm not sure if I am missing something here.

Is it possible to get alerted only for changes in a specific profile? For example, not get alerted on hardware or software changes but only on IIS changes?

The event that triggers the alert doesn't seem to contain the profile name available for filtering.

I see that there is Orion.SCM.ServerConfigurationChange in SWQL Studio but it has no data and I don't know if I should be using it for this requirement.

So I was wondering how this could be achieved.

Thanks,

Raven

bmrad · Accepted Answer

Hi. You can filter on the profile name for the "Server configuration has changed" event (but not the Baseline Change Event). Simply duplicate the default "Server configuration has changed" event, then add the filter under Details section, like shown below.

Let me know if that works for you, I am still researching why these filters don't appear for the baseline event.

Alert for specific profiles

Top Replies