Host Intrusion Detection System Administrator's Guide Release 3.0

Schedule Manager Screen
Configuring Surveillance Groups
Chapter 5
68
Step 3. Create a name for the new surveillance group.
a. Click the Copy button on the Surveillance Groups panel. This opens the Copy
Surveillance Group dialog box (Figure 5-6).
Figure 5-6 Copy Surveillance Group Dialog
b. Enter a name in the input field. Valid characters are alphanumeric and underscore;
the first character must be alphanumeric. Schedule names are case-sensitive. If you
include invalid characters, you will be prompted to have them replaced with
underscores.
c. Click OK to accept it. Click Cancel to quit.
The new group’s templates and values are identical to the old group’s.
Step 4. To revise the new group, follow the procedures in “Modifying a Surveillance Group” on
page 68.
Modifying a Surveillance Group
NOTE Do not modify any predefined group, distributed with HP-UX HIDS. It cannot be saved.
Copy it instead. See “Copying a Surveillance Group” on page 67 and “Predefined
Surveillance Schedules and Groups” on page 81.
To modify a surveillance group
Step 1. Go to the Configure tab of the Schedule Manager screen:
Step 2. Select the group in the Surveillance Groups panel.
Step 3. In the Select column of the Templates panel, click the check boxes to mark the
templates you want to include in the group. You can also use the Select All and Clear
All buttons to mark all or none of the templates.
Step 4. Using the Templates and Properties panels, edit the property values. See
“Configuring Detection Templates” on page 71.
NOTE You cannot modify, rename, or delete a surveillance group if it is in a schedule that is
currently scheduled or running on an agent host. For more information, see Chapter 4,
“System Manager Screen,” on page 43.