How do I
change the level of ASQ alarms in order to get full monitoring?
Sometimes, despite the ASQ module blocking certain traffic, no
alarms are raised. This arises from the fact that certain alarms are ignored.
The level of all alarms can be changed with the help of the following commands:
cd ~/ConfigFiles/ASQ
mv 00 00.bak
cat 00.bak | sed 's/ignore/minor/g' > 00
enasq
In this way, each alarm that is raised will appear in the list of alarms,
as such allowing an easier diagnosis of the problem encountered. Once the issue
has been resolved, the alarm levels can be reset to their initial values using
the following commands:
cd ~/ConfigFiles/ASQ
rm 00
mv 00.bak 00
enasq
Caution: Remember to enable monitoring on the right ASQ profile.
There is no point in enabling monitoring on the incoming profile if the issue
is related to connections that have been established from the internal network.