Viewing the SmartVision event notification filter using the CLI

Use the show fenotify preferences command to view the filter-by-severity criteria for SmartVision alerts distributed by Trellix event notification services. The notification-filtering criteria is displayed in the Smart Vision Event Severity Filter Level line of the command output:

minor―Distribute alerts for severities 1 – 3 only.
major―Distribute alerts for severities 4 – 6 only.
critical―Distribute alerts for severities 7 – 10 only.
all―Distribute alerts of all severities.

Prerequisites

Trellix event notification services and their service consumers are configured. For details, see the Network Security User Guide
Admin or Operator access to theSmartVision appliance.

To view the severity used to filter Trellix event notifications for alerts:

Log in to the appliance CLI and go to configuration mode:
```
hostname > enable
hostname # configure terminal
```
In this example, the appliance can send Trellix event notifications for events of all severity levels. This is the default setting.
```
hostname (config) show fenotify preferences
Notification customized settings:
.
.
.
Smart Vision Event Severity Filter Level: all
```
In this example, the filter-by-severity criteria for alerts distributed by Trellix event notification services is limited to severities 7 through 10:
```
hostname (config) show fenotify preferences
Notification customized settings:
.
.
.
Smart Vision Event Severity Filter Level: critical
```