Skip to content

How to forward alerts to another host

AlertForwarding to another host provides an additional layer of monitoring and management for critical systems, helping to ensure prompt detection and resolution of any issues that may arise.

To see how to forward an alert, follow the steps described below:

Authentication

To access Web Interface, open a web browser and type the application's IP address or DNS name. The default address initially assigned to Web Interface is: https://CyberquestIPAddress (example).

The browser automatically redirects you to CYBERQUEST's authentication page:

In order to forward an alert navigate to Settings > Applications Settings ** and select AlertForwarding** option, and will open the page:

AlertForwarding_AlertForwardingEnable - complete with 1 for enable, or 0 for disable.

AlertForwarding_ForwardingSecurityLevel - forwarding security level.

AlertForwarding_ForwardingSecurityScore - forwarding security score.

AlertForwarding_forwardSyslog - complete with 1 if you want to activate, or 0 to deactivate. In our case we need to activate, in order to forwarding alerts.

AlertForwarding_forwardSyslog_host - the server you want to forward alerts to.

AlertForwarding_forwardSyslog_port - the port of the server on which you forward alerts.

After you have filled in all the information, you can proceed to the next step, which is to restart the Data Correlation service.

To restart the Data Correlation service, where it's in Settings > Application Settings > Data Correlation:

To restart the service, all you need to do is fill in the number 1. Once the process is complete, you'll see 0 indicating that the service has been successfully restarted.