Blog

Cool Halo Trick #13: Alert on Server Reboots

Problem: I need to be alerted if one or more of my servers are rebooted by my provider.

Cloud Passage Halo can be configured to alert you whenever a server gets rebooted. (Note that this will only alert on true reboots. An alert will not be generated when a VM’s state is stopped or suspended, and then restarted.)

In Halo Portal, go to Policies → Special Event Policies → Add New Special Events. Give the policy a name as well as a description.

On the Server restarted line, check off Log event and Generate an alert; select Flag critical to classify as a critical event. (See Figure 1)

Once complete, click the Save button on the bottom of the screen.

From the Halo main menu, select Policies → Alert Profiles → Add New Alert Profile. The alert profile lets you define which Halo users should receive email alerts when an event is detected. Provide a name and description for the alert, and identify how often alerts should be sent.

Click the Add users button to produce a list of defined Halo users. Select the ones who should receive this alert. (See Figure 2)

Once complete, click the Save button on the bottom of the screen.

From the Halo main menu, select Servers → Security Events. Click the name of the group which contains the servers you wish to monitor for reboots. When the Edit Details option appears, click on it (See Figure 3)

On the Special Events Policy line, use the pull down menu to select the special event policy you just created. Likewise, on the Alert Profiles line, select the alert policy you just created. (See Figure 4)

Click the Save button when complete.  That’s it!

Now whenever a server within the specified group is rebooted, Halo will both log and alert on the occurrence. Log entries can be viewed at Servers → Security Events History from the Halo main menu.

Alerts will be delivered to the email address associated with each user defined in the alert profile. (See Figure 5)

 

Related Posts