Get an email alert from CPPM when we see "n" failed auth within "x" minutes

Aruba Employee
Aruba Employee

This article talks about alerting admin ( vai email) if we see "n" number of auth failures within a defined interval.

 

This has been tested on CPPM 6.4 and older.

 

First we need to add SMTP host to insight module for the email alerting to work. Please refer to this article for more information about this.

 

 

Then navigate to Alerts tab  and click on "add Alerts"

 

rtaImage (2).jpg

 

In the above screen capture, please enter the necessary details.

We can select the default template for WebAuth failures also.

Make sure that we use "AND" condition as combination algorithm.

 

The above alert will send an email if CPPM sees 500 radius authentication failures in span of 5 minutes.

Version history
Revision #:
1 of 1
Last update:
‎04-09-2015 08:04 AM
Updated by:
 
Labels (1)
Contributors
Comments
safdari.sami@yahoo.com

thanks for the provided information.

 

if i set the threshold 50 and interval 5 minute.....what will happed if fail authentication exceed the 50 threshold to 60 then will it send an email or it must be btween 1-50 threshold.

 

thanks for your repond.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: