HP-UX Host Intrusion Detection System Version 4.2 Administration Guide

3. Create a name for the new surveillance schedule.
a. Press the Copy button on the Schedules panel. This opens the Copy Surveillance
Schedule dialog box (Figure 5-3).
Figure 5-3 Copy Surveillance Schedule Dialog
b. Enter a name in the input field. Valid characters are alphanumeric and underscore; the
first character must be alphanumeric. Schedule names are case-sensitive. If you include
invalid characters, you will be prompted to replace them with underscores.
c. Click OK to accept it and Cancel to exit the dialog box.
The new schedule’s groups, templates, and values are identical to the old schedule’s.
4. To revise the new schedule, follow the procedures in “Modifying a Surveillance Schedule”
(page 62).
Modifying a Surveillance Schedule
To modify a surveillance schedule, follow the steps:
1. On the Schedule Manager screen select a schedule in the schedules panel.
2. If necessary, create new surveillance groups. For more information, see “Configuring
Surveillance Groups” (page 64) for details.
3. Select the Configure tab.
4. In the Select column of the Surveillance Groups panel, click the check boxes to mark the
surveillance groups you want to include in the schedule. You can also use the Select All
and Clear All buttons to mark all or none of the groups.
5. Select the Timetable tab.
6. Specify the times and days that you want each group in the surveillance schedule to run.
For more information, see “Setting Surveillance Schedule Timetables” (page 70).
7. Select the Alert Aggregation tab. Configure alert aggregation by following the steps described
under “Configuring Alert Aggregation” (page 72).
8. When your surveillance schedule is complete, it is a good idea to save it to the disk. For
more information, see “Saving a Surveillance Schedule” (page 63).
NOTE: The changes you make to a schedule are not propagated to any agent host until you
activate it from the System Manager screen. If you modify a running schedule, you need to
activate the schedule again to apply the changes.
Renaming a Surveillance Schedule
To rename a surveillance schedule, follow the steps:
1. On the Schedule Manager screen, select the schedule in the Schedules panel.
62 Using the Schedule Manager Screen