Table of Contents | ||
---|---|---|
|
...
For example, to change the priority of an alert to Urgent if the triggering event contains a given username or when a single source IP scans more than ser a set number of ports within any 10-minute period.
...
Click the ellipsis menu that appears at the end of the row and select:
Stop: when the filter is active, the menu shows this option to deactivate it.
Run: when the filter is inactive, the menu shows this option to activate it again.
Delete: this option removes the filter permanently.
...
Related articles: