Viewing the Alarms

Prerequisites

• The database audit instance is in the Running state.
• For details about how to enable database audit, see Enable Database Audit.
• Set alarm notification by referring to Configuring Alarm Notifications.

Procedure

1. Log in to the management console.
2. Click and choose Security > Database Security Service. The Dashboard page is displayed.
3. In the navigation tree on the left, choose Instances.
4. Click the name of an instance, click the Alarm Monitoring tab.
5. View the alarm information, as shown in Figure 1. For details about related parameters, see Table 1.
   Figure 1 Viewing alarms
   

   Table 1 Parameters of alarms

   Parameter	Description
   Time	Time when an alarm occurred.
   Type	Alarm type. The options are as follows: Audit traffic exceeds threshold CPU exceptions Memory exceptions Disk exceptions Insufficient audit log storage Log backup to OBS failed Agent exceptions Risky operations
   Alarm Risk Severity	Risk severity of an alarm. The options are as follows: High Moderate Low
   Cleared	Time when an alarm is cleared
   Confirmed Or Not	Confirmation status of an alarm.
   Description	Description of an alarm
   Operation	Operations supported by alarms, including: Confirm Delete Database backup

   To query specified alarms, perform the following steps:

   • Select Last 30 minutes, 1 hour, 24 hours, 7 days, or 30 days from the drop-down list, and click to view alarms of the specified time range.
   • Select All, High, Moderate, or Low for Risk Severity. Alarms of specified severity are displayed in the list.
   • Select an alarm type, and alarms of specified alarm type is displayed in the list.
   • Set the confirmation status (Unconfirmed or Confirmed). Alarms in this status are displayed in the list.

Follow-Up Procedure

• To confirm an alarm, click Confirm in the Operation column of the alarm. The alarm status changes to Confirmed.
  Figure 2 Confirming an alarm
  

  You can select multiple alarms to be confirmed and click Batch Confirm to batch confirm alarms.

  Figure 3 Confirming alarms in batches
  
• If an alarm has been handled, you can click Delete in the Operation column of the row that contains the alarm. In the dialog box that is displayed, click OK.
  Figure 4 Deleting an alarm
  
• If the alarm type of an alarm is ransomware protection rule, locate the row that contains the alarm and click database backup in the Operation column. For details, see Creating a Manual Backup.