How do I create, edit, remove, enable or disable an OS Service rule?

Introduction

To create a new OS Service rule

To edit an OS Service rule

To remove an OS Service rule

To enable or disable an OS Service rule

To sync OS Services across multi-server configuraiton (configuration sets)

RESTful API

Introduction:

OS Service rules specify filters to create the whitelist of OS Services that will be monitored by Entuity. When creating OS Service rules, you can apply View-based profiles that specify the Views to which the rules are applicable. For further help and information on View-based profiles, please see this article.

To create a new OS Service rule:

1. Navigate to the OS Service Management page.
2. Click New Service Rule at the top of the page, via the Overflow Menu, or via the right-click Context Menu.
   
   
   
   
3. This will open the New Service Rule form on the right of the page.
   
   

General

1. Specify a Name for the OS Service rule. This must be unique.
2. Enter a Description of the OS Service.

Service

1. Enter a Service Name. This is the OS Service name to filter for, and is case insensitive. This field cannot be empty.
2. Specify the filter to use in the Filter Using dropdown field. Select from one of two options:
   • Equals - the OS Service name must match exactly the specified Service Name for the OS Service to be included.
   • Contains - the OS Service name must contain the specified Service Name for the OS Service to be included.
3. Specify the Operating System in the dropdown field, choosing from either Windows or Linux.
4. Specify whether this OS Service rule will be Enabled. If disabled, the rule is treated as if it is not in the whitelist when polling.

Profiles

1. Profile Filter - choose one of the following:
   • Always Retrieve Service - this OS Service rule will be run against the entire network, and no profiles will be specified)
   • Retrieve Only From Selected Profiles - select the profile(s) to which this OS Service rule will be applied.

Click Done in the top right to save your rule, otherwise click Cancel. If saved, the rule will appear in the table on the OS Service Management page.

To edit an OS Service rule:

1. On the OS Service Management page, select a rule from the table and click Edit Service Rule at the top of the page, via the Overflow Menu, or via the right-click Context Menu.
   
   
   
   
2. This will open the Edit Service Rule form on the right side of the page. The fields are the same as when creating a new rule, as can be seen above.
3. Once you have made your changes, click Done in the top right to save them, otherwise click Cancel.

To remove an OS Service rule:

1. On the OS Service Management page, select a rule or rules from the table and click Remove Service Rule at the top of the page, via the Overflow Menu, or via the right-click Context Menu.
   
   
   
   
2. A confirmation window will appear. Click Yes or No as required.
   
   

To enable or disable an OS Service rule:

If a rule is disabled, it will be ignored when filtering OS Services. You can enable or disable a rule when creating or editing, or by selecting the rule or rules and then clicking Enable Service Rule or Disable Service Rule via the Overflow Menu or right-click Context Menu.

To sync OS Services across multi-server configurations (configuration sets):

You can sync OS Service rules across multi-server configurations via server configuration sets. To sync OS Service rules across config sets, you must also enable Sync Views. Note, syncing OS Services is separate to syncing profiles - profiles are synced along with Views (Sync Views).

RESTful API:

Please see the following for help and information on monitoring OS Services via Entuity RESTful API:

• List all OS Service rules, create a new rule or delete all rules.
• List, update or delete an OS Service rule.