Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Available for:
Cloud SIEM
|
Cloud Security
|
App and API Protection
Overview
Notification rules are predefined sets of conditions that automate the process of informing your team about security issues. By using notification rules, you no longer need to manually set up notifications for each individual detection rule. Notification rules can be configured to cover a wide range of scenarios by specifying parameters such as severities, rule types, rule tags, signal attributes, and signal tags.
Create notification rules
To create a notification rule, specify the conditions under which the rule should be triggered. These conditions may include criteria such as severity, detection rule type, tags, and attributes. When an issue matches the defined criteria, the rule automatically sends notifications to the designated recipients.
As you configure the rule, a preview of issues matching the notification rule conditions appears on the Preview of Matching Results panel. This preview helps you determine if your notification rule is too specific or too broad, allowing you to adjust the criteria accordingly for optimal coverage.
- On the Notification Rules page, click New Notification Rule.
- Enter a Name for the notification rule.
- Select the source type for the notification rule:
- Vulnerability: A potential security flaw in your infrastructure.
- Signal: Suspicious activity that poses an active threat against your infrastructure.
- Select one or more severity levels.
- Specify the tags and attributes that must be present in order for the notification rule to be triggered.
- Click Add Recipient.
- Specify the recipients you want to notify when the notification rule is triggered. You can notify individuals, teams, create Jira issues, and more. See Notification channels for more information.
- Click Save.
Manage notification rules
Enable or disable a notification rule
To enable or disable a notification rule, toggle the switch on the notification rule card.
Edit a notification rule
To edit a notification rule, click the notification rule card. After you finish making your changes, click Save.
Clone a notification rule
To clone a notification rule, click the vertical three-dot menu on the notification rule card and select Clone.
Delete a notification rule
To delete a notification rule, click the vertical three-dot menu on the notification rule card and select Delete.
Further Reading
Documentation, liens et articles supplémentaires utiles:
