HP-UX Host Intrusion Detection System Version 4.4 Administrator Guide (5900-1634, April 2011)

3. Create a name for the new surveillance schedule.
a. Press the Copy button on the Schedules panel. This opens the Copy Surveillance Schedule
dialog box (Figure 5).
Figure 5 Copy Surveillance Schedule Dialog
b. Enter a name in the input field. Valid characters are alphanumeric and underscore; the
first character must be alphanumeric. Schedule names are case-sensitive. If you include
invalid characters, you will be prompted to replace them with underscores.
c. Click OK to accept it and Cancel to exit the dialog box.
The new schedule’s groups, templates, and values are identical to the old schedule’s.
4. To revise the new schedule, follow the procedures in “Modifying a Surveillance Schedule”
(page 55).
Modifying a Surveillance Schedule
To modify a surveillance schedule, follow the steps:
1. On the Schedule Manager screen select a schedule in the schedules panel.
2. If necessary, add Containers (SRP). For more information, see “Configuring to Monitor HP-UX
Containers (HP-UX SRP)” (page 57).
3. If necessary, create new surveillance groups. For more information, see “Configuring
Surveillance Groups” (page 59) for details.
4. Select the Configure tab.
5. In the Select column of the Surveillance Groups panel, click the check boxes to mark the
surveillance groups you want to include in the schedule. You can also use the Select All and
Clear All buttons to mark all or none of the groups.
6. Select the Timetable tab.
7. Specify the times and days that you want each group in the surveillance schedule to run. For
more information, see “Setting Surveillance Schedule Timetables” (page 65).
8. Select the Alert Aggregation tab. Configure alert aggregation by following the steps described
under “Configuring Alert Aggregation” (page 67).
9. When your surveillance schedule is complete, it is a good idea to save it to the disk. For more
information, see “Saving a Surveillance Schedule” (page 56).
NOTE: The changes you make to a schedule are not propagated to any agent host until you
activate it from the System Manager screen. If you modify a running schedule, you need to activate
the schedule again to apply the changes.
Renaming a Surveillance Schedule
To rename a surveillance schedule, follow the steps:
1. On the Schedule Manager screen, select the schedule in the Schedules panel.
Configuring Surveillance Schedules 55