Create New Text File Alarm Notification Policies

The Text File Alarm Notification feature allows LogRhythm administrators to write alarm notifications to a text file in near-real-time. These alarm records are formatted as a simple set of delimited text fields that can be read by many different applications. For example, you can configure BMC PatrolAgent to collect alarm records and feed them to an event/impact management system. For more information, see Define a Text File Notification Policy.

1. Do one of the following to access the Notification Policy Manager:
   • Administrators. On the main toolbar, click Deployment Manager. On the Tools menu, click Distribution, click Notifications and Collaboration, and then click Notification Policy Manager from the main menu.
   • Non-Administrators. On the My LogRhythm menu, click My Notification Policies.
2. On the File menu, click, New Text File Policy.
3. Enter the Base File Path on the ARM host. The Base File Path may be a:
   • File path. Example: D:\Alarms\Alarms.txt
   • Directory path. Example: D:\Alarms\
   • UNC path. Example: \\FileSrv03\Alarms\
4. Select the appropriate alarm record format and file rollover settings.
5. Select and set the order of the Include Alarm Fields you want.
6. To save the policy, click OK.

7. To close the Notification Policy Manager, click OK. 
   A new private policy is created.

   

   To create a group policy that can be used by others, see Create Group Notifications for Alarms.