HP-UX Host Intrusion Detection System Version 4.1 Administrator's Guide

Schedules and groups are saved automatically when you first create them and every
time you exit from the System Manager screen. For information about the format and
structure of surveillance schedules and groups, see Appendix E (page 247).
The Schedule Manager screen comprises of four major parts:
• The Configure tab, where you define surveillance schedules, groups, and template
properties. For more information, see “Configuring Surveillance Schedules”
(page 73), “Configuring Surveillance Groups” (page 76), and “Configuring
Detection Templates” (page 80).
• The Timetable tab, where you specify when each surveillance group of a
surveillance schedule will run. For more information, see “Setting Surveillance
Schedule Timetables” (page 85).
• The Global Properties tab, where you can specify whether to aggregate specific
program alerts or suppress duplicate alerts. To configure alert aggregation, see
“Configuring Alert Aggregation” (page 88). To configure duplicate alert
suppression, see “Configuring Duplicate Alert Suppression” (page 92)
• The Details tab, which displays the source definition of a surveillance schedule.
For more information, see “Viewing Surveillance Schedule Details” (page 94).
70 Using the Schedule Manager Screen