HP-UX Host Intrusion Detection System Version 4.1 Administrator's Guide

2. Enter a search string in the data field.
3. Click OK to begin the search, or Cancel to cancel the search.
The search begins from the next entry. If the string is found, the entry is highlighted
and other selections are cleared. If the string exists in one entry, you get an error
message. Click OK to proceed.
To search again, follow these steps:
• On the Network Node screen, repeat the last Find by performing one of the
following steps:
• Choose the Search > Find Again menu item.
• Press F3.
The search continues in the next entry. If the string is found, the entry is highlighted
and other selections are cleared. If the string is not found, you get an error message.
Click OK to proceed.
Deleting an Entry
To delete one or more alerts or errors, follow these steps:
1. On the Alerts or Errors tab of the Network Node screen select one or more entries.
See “Selecting Entries” (page 118).
2. Perform one of the following steps:
• Click Delete.
• Select the Edit > Delete Selected Alerts/Errors menu item.
• Right-click and choose Delete from the menu.
• Press Delete.
When you delete an entry from the Alerts or Errors tab, it is removed from the
memory copy. It is deleted in the log file when you save it to disk. If you do not
save, reloading restores the deleted entries.
Marking Entries as Seen or Unseen
You can mark alert or error entries as seen or unseen, to separate entries you have
handled from those still under consideration. Marking an alert as seen or unseen changes
the Unseen Alerts column for the host on the System Manager screen.
Seen Mark an entry as seen in the following ways:
• Click it. See “Selecting with the Mouse” (page 118).
• Click in a blank box in the entry’s Seen column.
• Click the All Seen button. All entries on current tab are marked as seen.
• Click the Seen button. Selected entries on current tab are marked as
seen.
• Choose the Edit > Select All Alerts/Select All menu item. All entries
on current tab are marked as seen.
120 Using the Network Node Screen