CCS ESM check by using the Quick Check Builder option
You can create CCS ESM
checks by using the Quick Check Builder option. Perform the steps
that are mentioned in the following section to create ESM checks
with the help of the Quick Check Builder.
To create a CCS ESM check by using the Quick Check
In the Standards pane,
right-click the section to which you want to add the new check and
In the Specify Name and
Target Type panel of the Check Builder, enter the following
In the Name text box, type a name for the new
In the Description text box, type a description for
the check. This field is optional.
From the Target Type drop-down list, expand the
Enterprise Security Manager Platform node, and then click the type
of asset that you want to be evaluated.
See About ESM data collector
In the Create Expressions
panel, add a message expression for each message that the
corresponding CCS ESM check can generate.
See Creating a
message expression for a new CCS ESM check.
See the Symantec_Enterprise_Security_Manager_Checks_Reference.chm
for information on the messages that ESM checks generate. This file
is located in the Documentation folder in the product disc.
Add data filters for ESM
module name and ESM policy name.
Adding the policy name and the module name data filters for a new
CCS ESM check.
Add an error expression
to the check that you want to create. The error expression checks
if an ESM agent reports any error message.
See Creating an
ESM error expression for a new ESM check.
Update the CCS check
formula so that the CCS check behaves as per the check execution
See Creating an ESM
See Editing the
check formula for a new CCS ESM check.
In the Review panel, view
the information that you have entered and then click