Managing Alert Types

Scenario

This section describes how to manage alert types. The detailed operations are as follows:

• Viewing Alert Types: describes how to view existing alert types and their details.
• Adding an Alert Type: describes how to create custom alert types.
• Associating an Alert Type with a Layout: describes how to associate a custom alert type with an existing layout.
• Editing an Alert Type: describes how to edit a custom alert type.
• Managing an Alert Type: describes how to enable, disable, and delete a custom alert type.

Limitations and Constraints

• By default, built-in alert types are associated with existing layouts. You cannot customize associated layouts.
• Built-in alert types are enabled by default and cannot be edited, disabled, or deleted.
• After a customized alert type is added, the Type Name, Type ID, and Subtype ID parameters cannot be modified.

Viewing Alert Types

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

5. In the navigation pane on the left, choose Security Orchestration > Objects. On the displayed page, click the Type Management tab.
   Figure 2 Type Management page
   

6. On the Type Management page, click the Alert Type tab.
7. On the Alert Type tab page, you can view all alert types in the Type Name area on the left.

   To view details about subtypes of an alert type, click the target type name in Type Name on the left. Details about all subtypes are displayed on the right. For details about the parameters, see Table 1.

   If there are many subtypes, you can select the Sub Type or Associated Layout and enter the corresponding keyword for search.

   Table 1 Alert type parameters

   Parameter	Description
   Sub Type/Sub Type Tag	Name and ID of an alert subtype.
   Associated Layout	Layout associated with the alert type.
   Startup Status	Whether an alert type is enabled Enabled: The current type has been enabled. Disabled: The current type has been disabled.
   SLA	SLA processing time of an alert type.
   Description	Description of an alert type
   Operation	You can edit and delete alert or incident types.

Adding an Alert Type

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 3 Workspace management page
   

5. In the navigation pane on the left, choose Security Orchestration > Objects. On the displayed page, click the Type Management tab.
   Figure 4 Type Management page
   

6. On the Type Management page, click the Alert Type tab.
7. On the Alert Types tab, click Add. On the Add Alert Type slide-out panel, set alert type parameters.

   Table 2 Parameters for adding an alert type

   Parameter	Description
   Type Name	Customize the name of the new alert type.
   Type Tag	Enter the alert type ID. The keyword must comply with the upper camel case naming rules, for example, TypeTag.
   Sub Type	Enter the subtype of the alert type.
   Sub Type Tag	Enter the alert subtype ID. The keyword must comply with the upper camel case naming rules, for example, SubTypeName.
   Startup Status	Indicates whether an alert type is enabled.
   SLA	Set the SLA processing time of the alert.
   Description	Description of a user-defined alert type

   

   After a customized alert type is added, the Type Name, Type Tag, and Sub Type Tag parameters cannot be modified.

8. In the lower right corner of the page, click OK.

   After the alert type is added, you can view the new alert type in Type Name area on the Alert Types tab.

Associating an Alert Type with a Layout

By default, built-in alert types are associated with existing layouts. You cannot customize associated layouts.

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 5 Workspace management page
   

5. In the navigation pane on the left, choose Security Orchestration > Objects. On the displayed page, click the Type Management tab.
   Figure 6 Type Management page
   

6. On the Type Management page, click the Alert Type tab.
7. On the type management page, select the type to be associated with a layout and click Associated Layout in the Operation column of the target type.
8. In the Associate Layout dialog box, select the target layout and click OK.

Editing an Alert Type

• Currently, the built-in alert type cannot be edited.
• After a customized alert type is added, the Type Name, Type Tag, and Sub Type Tag parameters cannot be modified.

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 7 Workspace management page
   

5. In the navigation pane on the left, choose Security Orchestration > Objects. On the displayed page, click the Type Management tab.
   Figure 8 Type Management page
   

6. On the Type Management page, click the Alert Type tab.
7. In the Type Name area on the Alert Types tab, click the name of the custom alert type to be edited. Details about the custom alert type are displayed on the right.
8. On the alert list page on the right, locate the row that contains the target type and click Edit in the Operation column.
9. On the displayed page, modify the parameters of the alert type.

   Table 3 Parameters for editing an alert type

   Parameter	Description
   Type Name	Name of an alert type, which cannot be modified.
   Type ID	Alert type ID, which cannot be modified.
   Sub Type	Enter the subtype of the alert type.
   Sub Type Tag	Alert subtype ID, which cannot be modified.
   Status	Sets the startup status of an alert type.
   SLA	Set the SLA processing time of the alert.
   Description	Description of a custom alert type

10. In the lower right corner of the page, click OK.

Managing an Alert Type

1. Log in to the management console.
2. Click in the upper left corner of the management console and select a region or project.
3. Click in the upper left corner of the page and choose Security & Compliance > SecMaster.
4. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 9 Workspace management page
   

5. In the navigation pane on the left, choose Security Orchestration > Objects. On the displayed page, click the Type Management tab.
   Figure 10 Type Management page
   

6. On the Type Management page, click the Alert Type tab.
7. On the Alert Types tab, manage alert types.
   

   • The built-in alert types are enabled by default. You do not need to manually enable them.
   • Currently, built-in alert types cannot be disabled or deleted.
   • Currently, built-in alert types cannot be deleted.

   Table 4 Managing an alert type

   Operation	Description
   Enable	On the Alert Types tab, select the types you want to enable and click Batch enable. Alternatively, locate the row containing the alert type you want to enable, click Disable in the Status column. In the dialog box displayed, click OK. If the system displays a message indicating that the operation is successful and the status of the target type changes to Enable, the target type is enabled successfully.
   Disable	On the Alert Types tab, select the types you want to disable and click Batch Disable. Alternatively, locate the row containing the alert type to be disabled, click Enable in the Status column. In the dialog box displayed, click OK. If the system displays a message indicating that the operation is successful and the Status of the target type changes to Disable, the target type is disabled successfully.
   Delete	On the alert type management page, select the type to be deleted and click Delete in the Operation column. In the displayed dialog box, enter DELETE and click OK.