Monitoring Using Overrides
Applies To: Forefront Endpoint Protection
Overriding a Monitor
You can use overrides to refine the settings of a monitoring object. As you fine-tune your monitors, you can reduce the amount of alerts. However, overriding monitors should be done with caution as you may override settings that are necessary in order to help you keep your environment secure. Overrides can be used to adjust the configuration of Operations Manager monitoring settings for FEP Security Management Pack monitors, attributes, object discoveries, and rules. For more information about FEP monitors, see About Monitors.
When you create an override, you can apply it to a single managed object or to a group of managed objects. You must have Advanced Operator user rights in order to create and edit overrides. After you configure override settings, the Effective Value column will display the settings that the override will enforce.
For more information about how to monitor by using overrides, see How to Monitor Using Overrides (https://go.microsoft.com/fwlink/?LinkId=206722).
To override a monitor
In the Operations console, click the Authoring button.
In the Authoring pane, expand Management Pack Objects, and then click Monitors.
In the Details pane, expand an object type completely, and then click a monitor.
On the Operations Manager toolbar, click Overrides, and then point to Override the Monitor. You can choose to override this monitor for objects of a specific type or for all objects within a group. After you choose which group of object types to override, the Override Properties dialog box opens, enabling you to view the default settings contained in this monitor. You can then choose whether to override each individual setting contained in the monitor.
Note
If the Overrides button is not available, make sure you have selected a monitor and not a container object in the Monitors pane.
Select each setting that you want to override. When you complete your changes, click OK.