How to Add an Event and Alert

This topic describes the entire process of adding a custom event and alert to ISA Server. This is a step-by-step process, with examples in Visual Basic® Scripting Edition (VBScript) code.

ISA Server includes predefined events that administrators can use in creating alerts, that is, actions that will take place when an event occurs. Typically, a new event will be defined and added to ISA by a third-party vendor, who anticipates a need for an event related to an ISA Server add-on. Once the event is available in ISA Server, an administrator can define an alert.

For this example, the added event will signify attacks related to the Domain Name System (DNS). There are four types of events: DNS Host Name Overflow, DNS Length Overflow, DNS Zone High Port, and DNS Zone Transfer.

Use the following steps to add a custom event and alert to ISA:

1. Add a new event definition by using the FPCEventDefinitions collection, as described in Adding a Custom Event.
2. Define a new alert for this event through ISA Management, as described in Adding a Custom Alert.
3. Signal the new event, as described in Signal the Event.

Note  ISA administration objects can be used with any language that supports COM. You need not use Visual Basic® Scripting Edition (VBScript) to add a custom event or alert. An example of using C++ to create a custom event and alert is provided in the topic Raising an Event When a String is Found.