Add/modify a File Operation Alarm Trigger

This function allows you to add or modify a monitoring alarm policy. You can customize different monitoring alarm policies for different assets.

Procedure

Select the User tab, and in the navigation tree of Desktop Asset Manager, select Desktop Control Policy > Monitoring Alarm to enter the monitoring alarm policy list page.
Click Add to enter the page for adding a monitoring alarm policy. To modify a policy, click the link of the policy to be modified.
Type the policy name, description, USB monitoring keywords, and printer monitoring keywords, and select the hardware and software changes that will trigger alarms.
Click OK to end the operation.

When adding a policy, make sure that the policy name is unique in the system.
A monitoring alarm policy contains at least one basic monitoring option. The options include USB monitoring, printer monitoring, hardware changes monitoring, software changes monitoring, and system resources monitoring.
If you select Reinstall OS for software change monitoring, after the monitored asset reinstalls its operating system, the INC system will generate only one syslog. If you do not select this option but select some other software changes, after the monitored asset reinstalls its operating system, the INC system will not send syslogs even though several software changes occur.
After a hardware or software change occurs, you can view the detailed information of the change on the hardware/software changes list according to the change time recorded in the syslog.

Policy Name: Unique identifier of the policy.
Keywords: With USB and printer keywords specified, the DAM will check the names of files operated on a USB or printer for the keywords. If any keyword is found in a file name, the DAM will send a syslog.