Use this section to specify the name of an NCL entity that the Mail Monitor will scan.
The following general rules apply to all NCL entity checks:
The full name of the entity. Note that this denotes the NCL entity, and not the entity name used to manage the scanning module.
The name of the entity to use inside NCL. This replaces the ncl_ entity name in cases where you need to specify the entity name using non-alphabetic characters.
The severity code, which can be 2 (warning) through 4 (fatal error).
The severity code for error levels, as defined in the note at the beginning of Section 3.3.
The list of nodes where Mail Monitor must make the NCL checks.
where check is either of the following:
Specifying a type
These are the types you can check for:
You can, optionally, specify a check-value to define the value the attribute should have. You must use parentheses for the value. For example:
state=boolean (ON)
You can specify up to 3 values for counters, with this format:
count=counter (warning-level,error-level,fatal-level)
For example, if you specify (5,10,50) you receive a monitor record with a "warning" severity value if the counter is greater than 5, an "error" severity value if greater than 10, and a "fatal" severity value if greater than 50.
Specifying a value (regardless of type)
If type is none of the above, Mail Monitor assumes it is a value, and checks that the Full_Attribute_Name has this value.