HP-UX Host Intrusion Detection System Version 4.3 administrator guide

NOTE: The /etc/opt/ids/schedules/sample directory contains read-only copies of the
predefined schedules. Users who want to revert back to the original predefined schedules can
manually copy them from /etc/opt/ids/schedules/sample into /etc/opt/schedules.
Creating a New Surveillance Schedule
This section describes about how to create a new surveillance schedule.
To create a new surveillance schedule, follow the steps:
1. Go to the Schedule Manager screen.
2. Create a name for the new surveillance schedule.
a. Press the New button on the Schedules panel. This opens the New Surveillance
Schedule dialog box (Figure 5-2).
Figure 5-2 New Surveillance Schedule Dialog
b. Enter a name in the input field. Valid characters are alphanumeric and underscore; the
first character must be alphanumeric. Schedule names are case-sensitive. If you include
invalid characters, you will be prompted to replace them with underscores.
c. Click OK to accept it and Cancel to exit the dialog box.
By default, a new schedule starts with all existing surveillance groups selected.
3. To set up the new schedule, follow the procedures in “Modifying a Surveillance Schedule”
(page 62).
Copying a Surveillance Schedule
If an existing surveillance schedule is similar to what you want to create, you can copy the old
one and change the copy.
To copy a surveillance schedule, follow the steps:
1. Go to the Schedule Manager screen.
2. Select the schedule you want to copy in the Schedules panel.
Configuring Surveillance Schedules 61