• SonicOS 7.0 Device Log
• About Device
  • Device Log Introduction
• Settings
  • Filtering the Base Setup View
  • Configuring the Logging and Alert Levels
    • Setting the Logging Level
    • Setting the Alert Level
  • About Other Top Row Buttons
    • Edit Attributes of All Categories
    • Reset All Event Counts
    • Save Template
    • Import Template
      • Default Template
      • Minimal Template
      • Analyzer/ViewPoint/GMS Template
      • Firewall Action Template
      • Custom Template
    • View Logs
  • About the Log Settings Base Setup Table
    • Category Column
    • Color Column
    • ID Column
    • Priority Column
    • GUI Column
    • Alert Column
    • Syslog Column
    • Internet Protocol Flow Information Export (IPFIX) Column
    • Email Column
    • Event Count Column
    • Edit and Reset Count Icons
  • Configuring Event Attributes Globally
  • Configuring Event Attributes Selectively
    • Configuring Event Attributes by Category
    • Configuring Event Attributes by Group
    • Configuring Event Attributes by Event
    • About Filename Logging
• Syslog
  • About Event Profiles
  • About Syslog Server Profiling
  • Using a GMS/Analytics Server for Syslog
  • Syslog Settings
  • Syslog Servers
    • Adding a Syslog Server
    • Editing a Syslog Server
    • Enabling Syslog Servers
    • Disabling Syslog Server
    • Deleting Syslog Servers
• Automation
  • Email Settings
  • Mail Server Settings
  • FTP Log Automation
• Name Resolution
• Reports
  • Data Collection
  • View Data
  • Backup Logs Information
• AWS
  • Enabling AWS Logs
• SonicWall Support
  • About This Document

Setting the Alert Level

The Alert Level provides a way to use the Event Priority setting of the event to filter for email alerts generation. It is assumed that the event has already been included after applying the Logging Level filter and after applying the Frequency Filter Interval configured for the Send Events as E-mail Alerts option in the Edit dialogs. For Alert Level filtering, only events with an Event Priority of Warning or higher are included.

While the Event Priority for each event has a factory default value, the Edit dialogs allow the Event Priority to be customized as needed on the Category level, Group level, or individual Event level. By changing the Event Priority for selected events, administrators can include events that are otherwise filtered out because of the Logging Level setting. For example, a factory default Debug event can be set to have an Event Priority of Warning so that it is included in the logs when Logging Level is set to Warning.

Email alerts are sent to the email address configured in Send Alerts to E-mail Address in the Log > Automation page or, if set, configured in one of the Edit dialogs launched from the table on the Log > Settings page. Events with an alert level equal to or greater than the configured Alert Level are sent to the specified email address. No email alerts are sent for events with a lower alert level. This enables you to filter out lower-level email alerts to reduce the actual emails transmitted.

The following alert levels are available for selection:

• Emergency
• Alert
• Critical
• Error
• Warning

The default value is Alert.

To set the alert level

1. Navigate to the Log > Settings page.
2. From the Alert Level drop-down menu, select the alert level you want.

   All events with Event Priority equal to or higher than the selected Alert Level are also emailed. For example, if you select Error as the Alert Level, all messages all messages with Event Priority of Error, Critical, Alert, and Emergency are emailed.

   To email alerts for events of all alert levels, select Warning as the Alert Level.