Configuring Alarm Monitoring Rules

Scenarios

You can set SecMaster alert rules to customize the monitored objects and notification policies, and set parameters such as the alert rule name, monitored object, metric, threshold, monitoring scope, and whether to send notifications. This helps you learn the SecMaster security status in a timely manner.

Prerequisites

To set alarm rules, you must be granted the CES FullAccess permissions. If a message appears, indicating that you have insufficient permissions, contact the administrator to obtain permissions. For details, see Permissions.

Creating a Metric Alarm Rule on Cloud Eye

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Management & Governance > Cloud Eye.
4. In the navigation pane on the left, choose Alarm Management > Alarm Rules.
5. In the upper right corner of the page, click Create Alarm Rule.
6. On the displayed page, configure required parameters.

   Table 1 Parameters for creating a metric alarm rule

   Parameter	Description
   Name	Name of the alarm rule. The name is automatically generated, but you can change it to a custom one. Only letters, digits, hyphens (-), and underscores (_) are allowed. The name cannot exceed 128 characters.
   Description	Description of the alarm rule. The value can contain a maximum of 256 characters. This parameter is optional.
   Alarm Type	Select Metric.
   Cloud Product	Select SecMaster - SecMaster user.
   Resource Level	Retain the default value Cloud product.
   Monitoring Scope	Retain the default value All resources.
   Method	Select Configure manually.
   Alarm Policy	Define a custom alarm policy. The following is an example. Figure 1 A custom alarm policy
   Alarm Notifications	For details about how to configure alarm notifications, see Alarm Notification Parameters in Creating an Alarm Rule and Notifications for Cloud Eye.

7. Click Create in the lower right corner.
8. Return to the alarm rule page to view the created rule.

Creating an Event Alarm Rule on Cloud Eye

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Management & Governance > Cloud Eye.
4. In the navigation pane on the left, choose Alarm Management > Alarm Rules.
5. In the upper right corner of the page, click Create Alarm Rule.
6. On the displayed page, configure required parameters.

   Table 2 Parameters for creating an event alarm rule

   Parameter	Description
   Name	Name of the alarm rule. The name is automatically generated, but you can change it to a custom one. Only letters, digits, hyphens (-), and underscores (_) are allowed. The name cannot exceed 128 characters.
   Description	Description of the alarm rule. The value can contain a maximum of 256 characters. This parameter is optional.
   Alarm Type	Select Event.
   Event Type	Select System event.
   Event Source	Select Sec Master.
   Monitoring Scope	Retain the default value All resources.
   Method	Select Configure manually.
   Alarm Policy	Select the following policy: If the playbook instance fails to be executed, an alarm is generated every time this event is triggered.
   Alarm Notifications	For details about how to configure alarm notifications, see Alarm Notification Parameters in Creating an Alarm Rule and Notifications for Cloud Eye.

7. Click Create in the lower right corner.
8. Return to the alarm rule page to view the created rule.