Ensure system alerts are actively monitored via remote syslog or email alert watchers

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

From the CLI: ; Verify Alert Watchers (Email): Run the command purealert watcher list. Review the output to ensure that an internal organization email address is configured and enabled to receive notifications. ; Verify Syslog Forwarding: Run the command purelog syslog list. Review the output to confirm that a remote syslog server URI is actively configured to receive events (which includes purity.alert records).

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

To align with the security recommendations, implement a continuous alerting process by configuring an email alert watcher or remote syslog forwarding (or both). From the GUI: ; To Configure Alert Watchers (Email): ; Navigate to Settings > System and select Alerts and Notifications in the navigation pane. ; Add the appropriate internal email address for your organization's monitoring or administrative team to receive alert notifications. ; To Configure Syslog Forwarding: ; Navigate to Settings > System. ; In the Syslog Servers panel, create a syslog server by entering the URI of your remote syslog server (e.g., tcp://10.10.10.10:514) and saving the configuration. From the CLI: