...
Once you've created a sending policy (visit Manage sending policies to know how), it is available to be assigned to alerts in this area. Find the desired alert and click the paper airplane icon that appears under the Active Policies column.
...
Alert notification method | ||
|---|---|---|
Policy based: if you select this option, the notification procedure will be based on existing sending policies. | No notification: if you select this option, no user will be notified when an alert is triggered. This simply means that the alert will not be notified, not that it is not triggered or registered (they will be listed in the Alerts History area and the siem.logtrust.alert.info table). | Default method: if you select this option, only the default sending policy will be used for the notification procedure. This is the default option when you create an alert. |
Assigned policies | ||
If you select the policy-based option, you must check one or more checkboxes corresponding to the sending policies you want to assign. | ||
...
In this window, you can modify Summary, Description, and Priority, as well as the Query that sets the alert conditions or some of the parameters inherent to the triggering method (see table below). However, you cannot change the name, category, subcategory, or triggering method itself.
...
Changing triggering parameters
...
Related articles: