Notification methods are how administrators learn of events. To create a new Notification method, select the New Notification Method link when the All Notification Methods container in the ELM Console is selected under Results -> Event Views.

Notification Methods are triggered by assigning them to an Event View, Security View or as a Match/Timeout notification in Correlation Views. You may run separate Notification Methods for different events using Event Filters. For example, one method might describe how to notify a database administrator about important database related events, while another method might notify a security administrator about important security related events.

Notification Methods pass the full event information to the notification engine, which in turn forwards that information depending on the methods selected. If desired, the information sent via the Notification Method can be customized. This is useful when there are restrictions on message length, as in the case of a mobile pager. Customizable messages are a convenient way of making notifications more meaningful.

To disable all of the Notification Methods at the same time, right click the All Notification Methods container and select Disable. This disables all of the notification methods at the container level and doesn't change the specific notification methods setting

Desktop Notification Methods

The list below describes the methods designed for use at the desktop computer.

Dashboard Notifications - Send updates to the Dashboard when triggered.

ELM Advisor Notification - Send event information to ELM Advisor clients.

Mail Notification - Send event information to email addresses.

Server Notification Methods

The list below describes the methods designed for use with a server or service.

Command Script - Process event information using scripts and custom programs.

Forward Event - Send event information to another ELM Server.

SNMP V1, V2, V3 - Send event information to an SNMP management system or SNMP agent.

Syslog Message - Send event information to a syslog server.