Verifying the Playbook

Scenario

If the playbook for Automatic renaming of alarm names is enabled, you can verify the playbook status.

This topic describes how to verify a playbook.

Procedure

1. Log in to the management console.
2. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

4. In the navigation pane on the left, choose Threat Operations > Alerts.
   Figure 2 Alerts
   

5. Click Add. Configure parameters in the Add slide-out panel.
   • Alert Name: Enter a name for the alert.
   • Alert Type: Select Web attacks and then Web shell.
   • Debugging data: Select Yes.
   • Description: Description of the custom alert.
   • Retain the default values for other parameters.

6. Click OK.
7. Refresh the page and check whether alert names have been updated.

   If the playbook is enabled, the playbook automatically processes new alerts and displays new alert names.

   Figure 3 Output when no parameters are selected (default)
   
   Figure 4 Output when only severity is selected