Managing Alert Types

Limitations and Constraints

• By default, built-in alert types are associated with existing layouts. You cannot customize associated layouts.
• Built-in alert types are enabled by default and cannot be edited, disabled, or deleted.
• After a customized alert type is added, the Type Name, Type ID, and Subtype ID parameters cannot be modified.

Viewing Alert Types

1. Log in to the management console.
2. Click in the upper left corner of the page and choose Security > SecMaster.
3. In the navigation pane, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Management
   

4. In the navigation pane on the left, choose Security Orchestration > Objects. On the displayed page, click the Type Management tab.
   Figure 2 Type Management page
   

5. On the Type Management page, click the Alarm Type tab.
6. On the Alarm Type tab page, you can view all alert types in the Type Name area on the left.

   To view details about subtypes of an alert type, click the target type name in Type Name on the left. Details about all subtypes are displayed on the right. For details about the parameters, see Table 1.

   If there are many subtypes, you can select the Sub Type or Associated Layout and enter the corresponding keyword for search.

   Figure 3 Viewing alert types
   

   Table 1 Alert type parameters

   Parameter	Description
   Sub Type/Sub Type Tag	Name and ID of an alert subtype.
   Associated Layout	Layout associated with the alert type.
   Startup Status	Whether an alert type is enabled Enabled: The current type has been enabled. Disabled: The current type has been disabled.
   SLA	SLA processing time of an alert type.
   Description	Description of an alert type
   Operation	You can edit and delete alert or incident types.

Adding an Alert Type

1. Log in to the management console.
2. Click in the upper left corner of the page and choose Security > SecMaster.
3. In the navigation pane, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 4 Management
   

4. In the navigation pane on the left, choose Security Orchestration > Objects. On the displayed page, click the Type Management tab.
   Figure 5 Type Management page
   

5. On the Type Management page, click the Alarm Type tab.
6. On the Alarm Type page, click Add. On the Add Alarm Type slide-out panel, set alert type parameters.

   Table 2 Parameters for adding an alert type

   Parameter	Description
   Type Name	Customize the name of the new alert type. The name must comply with the upper camel case naming rules, for example, TypeName.
   Type Tag	Enter the alert type ID. The keyword must comply with the upper camel case naming rules, for example, TypeTag.
   Sub Type	Enter the subtype of the alert type. The name must comply with the upper camel case naming rules, for example, SubType.
   Sub Type Tag	Enter the alert subtype ID. The keyword must comply with the upper camel case naming rules, for example, SubTypeName.
   Startup Status	Indicates whether an alert type is enabled. : indicates that the alert type is enabled. : indicates that the type is disabled.
   SLA	Set the SLA processing time of the alert.
   Description	Description of a user-defined alert type

   

   After a customized alert type is added, the Type Name, Type Tag, and Sub Type Tag parameters cannot be modified.

7. In the lower right corner of the page, click OK.

   After the alert type is added, you can view the new alert type in Type Name area on the Alarm Type page.

Associating an Alert Type with a Layout

By default, built-in alert types are associated with existing layouts. You cannot customize associated layouts.

1. Log in to the management console.
2. Click in the upper left corner of the page and choose Security > SecMaster.
3. In the navigation pane, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 6 Management
   

4. In the navigation pane on the left, choose Security Orchestration > Objects. On the displayed page, click the Type Management tab.
   Figure 7 Type Management page
   

5. On the Type Management page, click the Alarm Type tab.
6. On the type management page, select the type to be associated with a layout and click Associated Layout in the Operation column of the target type.
7. In the Associate Layout dialog box, select the layout to be associated.
8. Click OK.

Editing an Alert Type

• Currently, the built-in alert type cannot be edited.
• After a customized alert type is added, the Type Name, Type Tag, and Sub Type Tag parameters cannot be modified.

1. Log in to the management console.
2. Click in the upper left corner of the page and choose Security > SecMaster.
3. In the navigation pane, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 8 Management
   

4. In the navigation pane on the left, choose Security Orchestration > Objects. On the displayed page, click the Type Management tab.
   Figure 9 Type Management page
   

5. On the Type Management page, click the Alarm Type tab.
6. In Type Name on the Alarm Type page, click the name of the custom alert type to be edited. Details about the custom alarm type are displayed on the right.
7. On the alert list page on the right, locate the row that contains the target type and click Edit in the Operation column.
8. On the displayed page, modify the parameters of the alert type.

   Table 3 Parameters for editing an alert type

   Parameter	Description
   Type Name	Name of an alert type, which cannot be modified.
   Type ID	Alert type ID, which cannot be modified.
   Sub Type	Enter the subtype of the alert type.
   Sub Type Tag	Alert subtype ID, which cannot be modified.
   Status	Sets the startup status of an alert type. : indicates that the type is enabled. : indicates that the type is disabled.
   SLA	Set the SLA processing time of the alert.
   Description	Description of a custom alert type

9. In the lower right corner of the page, click OK.

Managing an Alert Type

1. Log in to the management console.
2. Click in the upper left corner of the page and choose Security > SecMaster.
3. In the navigation pane, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 10 Management
   

4. In the navigation pane on the left, choose Security Orchestration > Objects. On the displayed page, click the Type Management tab.
   Figure 11 Type Management page
   

5. On the Type Management page, click the Alarm Type tab.
6. On the alert type tab, manage alert types.

   Table 4 Managing an alert type

   Parameter	Description
   Enable NOTE: The built-in alert types are enabled by default. You do not need to manually enable them.	On the Alarm Type page, select the types to be enabled and click Batch enable. Alternatively, locate the row containing the alert type to be enabled, click Disable in the Status column. In the dialog box displayed, click OK. If the system displays a message indicating that the operation is successful and the status of the target type changes to Enable, the target type is enabled successfully.
   Disable NOTE: Currently, the built-in alert types cannot be disabled.	On the Alarm Type page, select the types to be disabled and click Batch Disable. Alternatively, locate the row containing the alert type to be disabled, click Enable in the Status column. In the dialog box displayed, click OK. If the system displays a message indicating that the operation is successful and the Status of the target type changes to Disable, the target type is disabled successfully.
   Delete NOTE: Currently, built-in alert types cannot be deleted.	On the alert type management page, select the type to be deleted and click Delete in the Operation column. In the dialog box displayed, click OK.