Has anyone hacked together a select all for the acknowledge page? We've had a few major attacks recently and trying to ack 200 alerts takes more time than trying to actually fix the problem. It would be great if I could just hit select all and then the ack button.
Thanks! Skadz
On Tue, Jul 7, 2015, at 13:14, Ryan Skadberg wrote:
Has anyone hacked together a select all for the acknowledge page? We've had a few major attacks recently and trying to ack 200 alerts takes more time than trying to actually fix the problem. It would be great if I could just hit select all and then the ack button.
Go to the very bottom of the list on the acknowledge page. There is no Host or Test field on the left. Fill in the Cause field and hit the Submit button on the right.
This sends the acknowledge for *everything* on the page.
No, it doesn't. If you don't select any machines, you get a no acks requested message.
Skadz
On Tue, Jul 7, 2015 at 3:54 PM, Mark Felder <feld at feld.me> wrote:
On Tue, Jul 7, 2015, at 13:14, Ryan Skadberg wrote:
Has anyone hacked together a select all for the acknowledge page? We've had a few major attacks recently and trying to ack 200 alerts takes more time than trying to actually fix the problem. It would be great if I could just hit select all and then the ack button.
Go to the very bottom of the list on the acknowledge page. There is no Host or Test field on the left. Fill in the Cause field and hit the Submit button on the right.
This sends the acknowledge for *everything* on the page.
On Wed, Jul 8, 2015, at 05:19, Ryan Skadberg wrote:
No, it doesn't. If you don't select any machines, you get a no acks requested message.
Skadz
I swear I used this previously... I wonder if a coworker modified the page to function that way as we had a couple modifications.
I'll check into this.
On Wed, Jul 8, 2015, at 08:47, Mark Felder wrote:
On Wed, Jul 8, 2015, at 05:19, Ryan Skadberg wrote:
No, it doesn't. If you don't select any machines, you get a no acks requested message.
Skadz
I swear I used this previously... I wonder if a coworker modified the page to function that way as we had a couple modifications.
I'll check into this.
This page is generated from acknowledge.cgi (acknowledge.c) which makes it rather difficult to play with. :-(
participants (2)
-
feld＠feld.me
-
skadz＠skadz.com