Handling Container Alarms

Constraints

Servers that are not protected by HSS do not support alarm-related operations.

Procedure

This section describes how you should handle alarms to enhance server security.

Do not fully rely on alarm handling to defend against attacks, because not every issue can be detected in a timely manner. You are advised to take more measures to prevent threats, such as checking for and fixing vulnerabilities and unsafe settings.

1. Log in to the management console.
2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > Host Security Service.
   Figure 1 Accessing HSS
   

3. In the displayed dialog box, click Try the new edition to switch to the HSS (New) console.
   

   • Currently, HSS is available in the following regions: CN South-Guangzhou, CN-Hong Kong, AP-Bangkok, and AP-Singapore.
   • On the HSS (New) console, you can click Back to Old Console in the upper left corner to switch to the HSS (Old) console.

4. In the navigation pane on the left, choose Detection > Alarms, and click Container Alarms.
   Figure 2 Container alarms
   

   Table 1 Alarm statistics

   Alarm Event	Description
   Containers with Alarms	Number of containers for which alarms are generated.
   Alarms to be Handled	Number of alarms to be handled. By default, all unhandled alarms are displayed on the Events page. For more information, see Container Alarm Types.
   Handled Alarms	Number of handled alarms.

5. Handle alarms.
   

   Alarms are displayed on the Container Alarms page. Here you can check up to 30 days of historical alarms.

   Check and handle alarms as needed. The status of a handled alarm changes from Unhandled to Handled. HSS will no longer collect its statistics.

   • Handling all alarms in batches
     1. Select an event type, select the alarms, and click Handle.
        Figure 3 Selecting container event types
        
     2. In the dialog box that is displayed, select a handling method, confirm the information, and click OK. For more information, see Table 2.
        

        An alarm in the Handled state cannot be batch handled.

        Figure 4 Handling all container alarms
        
   • Handling selected alarms in batches
     1. Select an event type, select multiple alarms, and click Handle.
        Figure 5 Selecting container alarms
        
     2. In the dialog box that is displayed, select a handling method, confirm the information, and click OK. For more information, see Table 2.
        Figure 6 Handling selected container alarms
        
   • Handling a single alarm
     1. Select an event type, and click Handle in the Operation column of an alarm.
        Figure 7 Handling a single container alarm
        
     2. In the dialog box that is displayed, select a handling method, confirm the information, and click OK. For more information, see Table 2.
        Figure 8 Handling a single alarm
        

   Table 2 Handling alarm events

   Action	Description
   Ignore	Ignore the current alarm. Any new alarms of the same type will still be reported by HSS.
   Mark as handled	Mark the event as handled. You can add remarks for the event to record more details.