SIEM, Vulnerability Scanning, Server Monitoring and Compliance Training for IT Professionals
Table of Contents

Actions

An Action is a configurable and assignable object that executes a function when:

  • A Monitor starts, triggers, recovers, errors or completes.
  • A Report is complete or errors.
  • An Constant Delivery Pipeline is complete or errors.

Actions define properties such as the email address to send an alert or the Windows Service to restart. Actions can be created once then applied to many objects (e.g. Templates and Reports) allowing you to quickly implement a configuration change (e.g. an email address update) across all dependent objects.

How it works:

When a monitor triggers (e.g. a ping times-out, an Event Log download fails or free disk spaces falls below a critical threshold) or a Report completes, Server Manager checks the configured failure rate if applicable. If the monitor should trigger (e.g. a ping fails 3 times within one minute), Server Manager looks up the assigned Actions. If the monitor was previously working as expected or the Action is configured to re-fire every time the monitor triggers, the Action is executed. Prior to executing, all applied Action Variables are replaced with the appropriate values. Finally, Server Manager executes the Action.

Note
Server Manager includes numerous sample Actions. You have the option of assigning these actions to executables as is, modifing them or if prefer, removing all of them and defining your own. To view the sample actions, from the Explorer View, expand the Actions node then select Sample Actions.

How to Create an Action:

  • From the Menu Bar select File | New. The Create New Object View displays.
  • From the Create New Object View, select Action. The Action Properties view displays.
  • Configure the action.
  • When you have finished configuring the action, click the OK button to save.

Available Action Types

TypeDescription
DatabaseWrites triggered log entries and report output to database tables for external consumption.
DesktopReceive notifications from any desktop that has the Management Console installed and is connecting to the service.
EmailReceive email notification when executables such as monitors and reports start, trigger, complete, error and recover.
Event LogWrite to Event Logs when executables such as monitors and reports start, trigger, complete, error and recover.
ExecutableStart, stop or restart applications, scripts or batch files.
FileSave executable metadata and content (e.g. Report content and triggered log entries) to CSV, HTML, PDF and UTF-8 text files.
Micosoft TeamsSend messages to a Microsoft Teams Channel via an Incoming Webhook.
IIS IP Address RestrictionActively blocks IP addresses when an attack on your IIS web server is detected.
PowerShellExecute PowerShell commands and scripts.
ServiceStart, stop or restart Windows Services.
SMS MessageSend text messages using supported service providers.
SNMP TrapSend Corner Bowl Software SNMP Traps through Microsoft's SNMP Service.
SyslogWrite to Syslog messages when executables such as monitors and reports start, trigger, complete, error and recover.
Execute a ReportExecute a Report.
Execute a TemplateExecute other Templates.

How to display regular expression column variable values in actions:

When assigning actions to templates that implement regular expression columns, you have the option of displaying the regular expression variable values in any of the available text boxes that include the variable tag Variable Button button (e.g. The email subject line in email actions).

  • In any action property that includes the variable button, insert your regular expression column key then replace the '<' and '>' with '{' and '}' respectively. For example, replace <TARGET_ACCOUNT_NAME> with {TARGET_ACCOUNT_NAME}.

Related Topics

Templates

Reports

Auto-Configurators