|
I found the answer in the help file in the
BB server. Disabling
notifications temporarily
Note. This feature is not
automatically available. It must be explicitly defined in the RUNOPTS variable
of etc\bbdef.cfg.
Add the ENABLE_DISABLE option to enable it. Be warned that if you enable this
feature, a knowledgeable hacker could disable notifications while cracking into
your systems. You can
temporarily disable notifications without modifying the etc\bbwarnrules.cfg
file. Currently, only a manual operation can accomplish this; you must use the
BB.EXE utility distributed with the Big Brother client. All you have to do is
send a 'disable' message to the BBDISPLAY server(s) using the following format: BB.EXE
0.0.0.0 "disable 'host regular _expression_' 'duration' [reason]" You can
match multiple hosts and/or services by specifying a regular _expression_ instead
of a real host name. By default, the duration is in minutes, but you can also
use seconds, hours, or days by adding s, h, or d. (For example, 30s for 30 seconds or 1d for one
day.) You can also add an optional reason that will be displayed in the status.
Here are some examples:
From: owner-bb@bb4.com
[mailto:owner-bb@bb4.com] On Behalf Of Haq,
Humayun I know I
am not doing this right…I am running BB on a Windows 200 machine. So I cd to this below directory…I
tried the 2 instances below…My machine name is “us-ap010” '$BB' is not recognized as an internal or
external command, operable program or batch file. D:\Program Files\Quest Software\Big
Brother\BBNTD\3.10\bin>$BBDISP "disable host,us-ap010,com.msgs 14400
ignore messages for 10 days" '$BB' is not recognized as an internal or
external command, operable program or batch file. From: owner-bb@bb4.com
[mailto:owner-bb@bb4.com] On Behalf Of Daniel
O Winkless
Dan
I
wanted to temporarily disable only the messages from one of my servers that I
am monitoring. I don't want to disable the whole machine, however, I would like
to disable the messages so the "red alerts" would go away. Any way to
do that? If you can also please send instructions on that as well.
This e-mail and any attachment is for authorised use
by the intended recipient(s) only. It may contain proprietary material,
confidential information and/or be subject to legal privilege. It should not be
copied, disclosed to, retained or used by, any other party. If you are not an
intended recipient then please promptly delete this e-mail and any attachment
and all copies and inform the sender. Thank you. |