You can configure the behavior of XFEvents that trigger alarms; including the
conditions that trigger an alarm, how acknowledging an alarm in Security Center affects the
corresponding XFEvent in the CCURE 9000 system, which users receive alarm
notifications, and which partitions the alarm entities belong to.
What you should know
- The alarm behavior settings are global. They are applied to all CCURE 9000 alarms.
- Recipients are assigned to a CCURE 9000 alarm during the first
synchronization of an XFEvent. To change alarm recipients, see Modifying alarm recipients for the CCURE 9000 Access Control plugin.
- The partitions defined here replace partitions that are added from the
Alarms task.
- By default, XFEvents that require acknowledgment are imported as Security Center
alarm entities. But, you can turn any XFEvent into an alarm entity, for
instructions see, Configuring the behavior of XFEvents imported from CCURE 9000.
- It is not recommended to acknowledge a CCURE 9000 alarm that
has active causes in Security Center. Doing so resets the workflow and overrides
the logical causes that need to be investigated.
-
CCURE 9000 alarms that do not require acknowledgment are
automatically acknowledged in Security Center when the related XFEvent state
changes to normal in CCURE 9000.
- Alarms reappear after being acknowledged when the Acknowledge while
causes are active option is disabled in Security Center.
Procedure
-
From the Config Tool homepage, open the Plugins
task.
-
In the Plugins task, select the CCURE 9000 Access Control
plugin role from the entity browser, and then click the Alarms and
events tab.
-
In the Alarm behavior area, configure the following:
- Alarm Trigger > Acknowledged status
- When a CCURE 9000 event must be acknowledged, an
alarm is triggered in Security Center. When the CCURE 9000 event no longer requires
acknowledgment, the corresponding alarm is acknowledged in Security
Center.
- Alarm trigger > Active status
- This is the default setting. When a CCURE 9000
event becomes active, the corresponding alarm or custom event is
triggered in Security Center. When a CCURE 9000
event becomes inactive, the corresponding alarm is acknowledged in
Security Center.
-
Configure how alarm acknowledgment works in Security Center:
- Acknowledge from Security Center
- When this option is on and a user acknowledges a CCURE 9000 alarm in Security Desk, then the
corresponding event is acknowledged in the CCURE 9000 software.
- When this option is off, the acknowledge alarm command is
unavailable in Security Desk, so users must acknowledge the
corresponding event in the CCURE 9000
software.
- Acknowledge while causes are active
- When this option is on, you can force the acknowledgment of an alarm
even if the alarm has an active cause. This option is only available
when the Acknowledge from Security Center
option is on.
- When this option is off, you can only clear alarms that have no
causes. If an alarm with an active cause is acknowledged in Security
Center, the alarm is cleared, and then reappears. For this reason,
it is recommended to always review the causes of an alarm before you
clear it.
- Acknowledge and clear
- When this option is on and a user acknowledges an alarm in Security
Desk, the corresponding event is acknowledged and cleared in the CCURE 9000 software. Alarms that have active
causes cannot be acknowledged.
- When this option is off, users must first acknowledge the alarm, and
then clear the alarm.
- Clear while causes are active
- When this option is on, users can clear alarms from Security Desk,
even if the alarm has active causes. The alarms are also cleared in
the CCURE 9000 software.
- When this option is off, the clear option is unavailable in Security
Desk for an alarm until all causes are cleared.
-
In Alarm recipients, add the users to notify when an
alarm occurs.
If the list is empty, when an alarm is triggered in Security Center, no users
are notified.
IMPORTANT: The alarm recipients listed here are only added when
CCURE 9000 alarm entities are synchronized for the first
time. If you change the recipients list here, the changes are applied to new
alarms. If you need to change the recipients list, follow the steps in
Modifying alarm recipients for the CCURE 9000 Access Control plugin.
-
(Optional) In the Alarm partitions list, select the
partition for all synchronized CCURE 9000 alarm
entities.
Alarms created by the plugin are always members of the selected partitions.
CAUTION:
The plugin removes partitions added using the
Alarms task when these Alarm
partitions are changed.
-
Click Apply.