Role Availability | Read-Only | Investigator | Analyst | Manager |
USM Anywhere enables you to create and manage your own orchestration rules from the Alarms Alarms provide notification of an event or sequence of events that require attention or investigation. Details Page, which is the easiest way to configure an orchestration rule.
Warning: Orchestration rules only apply to future events and alarms.
Suppression rules using the Contains
, Match
and Match, case insensitive
operators apply to future events and alarms, not to events and alarms received in the current day.
You can create these rules:
- Suppression rule: You can create a rule to suppress alarms Alarms provide notification of an event or sequence of events that require attention or investigation. that match a particular set of criteria. See Creating Suppression Rules from the Alarms Page and Suppression Rules from the Orchestration Rules Page for more information.
- Notification rule: You can create a notification Communication of an important event, typically through an email message or other desktop display. In USM Appliance, notifications are typically triggered by events, policies, and correlation directives, and in USM Anywhere, they are typically triggered by notification rules or directly from alarms. rule according to a method. See Creating Notification Rules from the Alarms Page and Notification Rules from the Orchestration Rules Page.