Help Center/ Data Security Center/ User Guide/ Data Security Operations/ Alarm Management
Updated on 2024-10-09 GMT+08:00
View PDF

Alarm Management

When a system or service alarm is generated from the DBSS service, the alarm is pushed to the DSC in real time. Users can check and handle the alarm. Alarms are stored in the DSC for 30 days.

Prerequisites

DBSS has been enabled and there are assets on it.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner and select a region or project.
  3. In the navigation tree on the left, click . Choose Security & Compliance > Data Security Center .
  4. In the navigation tree on the left, choose Data Security Operations > Alarm Management. The Alarm Management page is displayed.
  5. You can view the unhandled alarms, alarm sources, and total number of alarms.

    Figure 1 Alarm doughnut chart

  6. View the alarm list. For details about the parameters, see Table 1.

    Table 1 Data risk alarm parameters

    Parameter

    Description

    Alarm Name/ID

    Indicates the name of the alarm source. An alarm should denote the content of the alarm. You can click an alarm name to view details about the alarm, including basic alarm information, handling suggestions, and attack information.

    Alarm Level

    There are 5 alarm severity levels:

    • Suggestion
    • Low
    • Medium
    • High
    • Critical

    Subcategory/Category

    Alarm source types are as follows:

    • Database attacks
    • API attacks

    Source

    Database Audit, Database Security Gateway, and API Security Gateway instances

    Status

    The status options are:

    • Open
    • Blocked
    • Closed

    Affected Assets

    Affected database assets or APIs.

    Verification Status

    Its value can be:

    • Unknown
    • Confirmed
    • False

    Owner

    Username.

    Created

    Time the alarm was created.

    Occurred On

    Time when an alarm occurs for the first time.

Related Operations

  • Convert to event.
    1. Click Convert to Event in the Operation column of the alarm list. The Convert to Event page is displayed.
    2. Enter the parameters, as shown in Table 2.
      Table 2 Parameters for converting an alarm to an event

      Parameter

      Description

      Event Name

      Enter the event name.

      Event Type

      Select an event type from the drop-down list box.

      Planned Closure Time

      Select the time when the event is closed.
    3. Click OK to convert an alarm to an event. You can view the converted event on the Event Management page.
  • Close

    Click Close in the Operation column of the alarm list to disable the alarm.

  • Edit

    Click More > Edit in the Operation column of the alarm list to edit the alarm.

  • Delete

    Click More > Delete in the Operation column of the alarm list to delete the alarm.

Parent topic: Data Security Operations