Alarm Management

Prerequisites

The DBSS service has been enabled and there are available assets on it. For details, see Purchasing Database Audit..

Procedure

1. Log in to the management console.
2. Click in the upper left corner and select a region or project.
3. In the navigation tree on the left, click . Choose Security & Compliance > Data Security Center .
4. In the navigation tree on the left, choose Data Security Operations > Alarm Management. The Alarm Management page is displayed.
5. You can view the unhandled alarms, alarm sources, and total number of alarms.
   Figure 1 Alarm doughnut chart
   

6. View the alarm list. For details about the parameters, see Table 1.

   Table 1 Data risk alarm parameters

   Parameter	Description
   Alarm Name/ID	Indicates the name of the alarm source. An alarm should denote the content of the alarm. You can click an alarm name to view details about the alarm, including basic alarm information, handling suggestions, and attack information.
   Alarm Level	There are 5 alarm severity levels: Suggestion Low Medium High Critical
   Subcategory/Category	Alarm source types are as follows: Database attacks API attacks
   Source	Database Audit instances
   Status	The status options are: Open Blocked Closed
   Affected Assets	Affected database assets.
   Verification Status	Its value can be: Unknown Confirmed False
   Owner	Username.
   Created	Time the alarm was created.
   Occurred On	Time when an alarm occurs for the first time.

Related Operations

• Convert to event.
  1. Click Convert to Event in the Operation column of the alarm list. The Convert to Event page is displayed.
  2. Enter the parameters, as shown in Table 2.

     Table 2 Parameters for converting an alarm to an event

     Parameter	Description
     Event Name	Enter the event name.
     Event Type	Select an event type from the drop-down list box.
     Planned Closure Time	Select the time when the event is closed.

  3. Click OK to convert an alarm to an event. You can view the converted event on the Event Management page.
• Close

  Click Close in the Operation column of the alarm list to disable the alarm.

• Edit

  Click More > Edit in the Operation column of the alarm list to edit the alarm.

• Delete

  Click More > Delete in the Operation column of the alarm list to delete the alarm.