Viewing Container Alarms

HSS displays alarm and event statistics and their summary all on one page. You can have a quick overview of alarms, including the numbers of containers with alarms, handled alarms, and unhandled alarms.

The Events page displays the alarm events generated in the last 30 days.

The status of a handled event changes from Unhandled to Handled.

Constraints

Servers that are not protected by HSS do not support operations related to alarms and events.

Procedure

Log in to the management console.
Click in the upper left corner of the page, select a region, and choose Security > Host Security Service.
In the navigation pane, choose Detection > Alarms and click the Container Alarms tab to view container alarms and events.
- View the overview of container alarms and events.
  - Alarm Statistics: You can view the number of containers that have alarms and the number of alarms to be handled and that have been handled.
  - Threats: You can view the number of alarms in a container by severity.
  - Top 5 Events: You can view the top 5 events with the largest number of alarms in a container.
- View the container alarms of a certain type.
  In the Event Types area, select an alarm event type to view the corresponding alarm event list. In the alarm event list, you can view the alarm threat level, alarm name, container status, pod name, and affected container name.
- View details about container alarms and events.
  Click an alarm name to go to its details page. You can view the container ID, IP address, VM name, and image ID.
- View the pod details of the container alarm event.
  Click the pod name of the target alarm event to view the pod details, including the node IP address, namespace, pod IP address, pod label, and container list.