Viewing Existing Model Templates

Scenario

SecMaster uses models to scan log data in pipelines. If the data is not within the model range, an alert is generated. Models are created based on templates. Therefore, you need to use existing templates to create models.

This section describes how to view existing model templates.

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
3. In the navigation pane, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

4. In the navigation tree on the left, choose Threat Operations > Intelligent Modeling. On the Intelligent Modeling page that is displayed, click the Model Templates tab. The Model Template page is displayed.
   Figure 2 Model Templates tab page
   

5. On the Model Templates page, view existing model templates.
   • Model Template Statistics: Displays the number of available templates and the number of active templates.
   • Severity: displays the severity statistics of existing templates, including critical, high-risk, medium-risk, low-risk, and warning.
   • The template list displays the severity, name, model type, update time, and creation time of the existing templates.
   • To view details about a model template, locate the row that contains the template, click Details in the Operation column. The template details page is displayed on the right.

     On the details page, you can view the description, query rules, triggering conditions, and query plans of the current model template.