Acknowledging Event Tickets

For an introduction to Event1. Either a log message that a Manager has standardized (i.e. normalized) for use by TLC (a.k.a. Normalized Messages), or an event or vulnerability imported from a scanner. 2. An 'event message' collected from a Log Source. Tickets and acknowledgments, see Working with Event Tickets.

To acknowledge an Event Ticket assigned to an Event in the Event-Database Viewer:

1.

In the side bar, select Events >Event-Database ViewerA type of Database ViewerA TLC Console1. Tripwire Log Center Console is the software for the TLC graphic user interface (GUI), or 2. The Tripwire Log Center GUI. Through the TLC Console, you can configure TLC, oversee your TLC environment, and manage log and event data. component in which you can review information about Events in Event-Management Databases. Types of Database Viewers include the Event-Database Viewer, IDS-Database Viewer, and Firewall-Database Viewer. in which you can query and work with the data in your Event Databases..

2.

To display Events in the main pane, select an Events option or Search in the side bar.

3.

In the main pane, select the Event.

Tips	If the Acknowledge column for an Event contains, the Event has been acknowledged. If the Event TicketA work ticket for an Event in an Event-Management Database. iconappears in an Event's Event Name column in the main pane, the Event is currently assigned to a ticket. To open the ticket, select the Event and clickTicketing > View Ticket in the button bar of the Event-Database Viewer.

4.

In the button bar, clickAcknowledge Event Tickets for selected items and select an acknowledgment.

To acknowledge that you are aware of the Event Ticket, select Ticket Created.

To indicate that the ticket reflects an Event of no significance, select False Positive.

To indicate an Event that occurred previously, select Repeat Event.

Tips	To create custom values for acknowledgments, see Working with Global Event-Ticket Settings. To view acknowledged Event Tickets, clickView acknowledged Event Tickets in the button bar.