Risk Monitoring

Updated on 2025-02-17 GMT+08:00

View PDF

SecMaster has interconnected with Cloud Eye. You can view SecMaster running metrics on the Cloud Eye console. Cloud Eye is a multi-dimensional monitoring platform provided by Huawei Cloud for a wide range of cloud resources. With Cloud Eye, you can learn about the resource usage and service running status on the cloud, receive alerts in a timely manner, and respond quickly to exceptions to keep your cloud services stable.

As a cloud security operations platform, SecMaster can access security alerts of other cloud services and display alerts by alert type and level. SecMaster can accurately monitor threats and attacks on the cloud in real time and detect security alert incidents in your assets. You can define and schedule threat alert notifications to learn about threats and risks in a timely manner. The notification items you can define include threat list, alert type, and risk severity. This feature helps you learn about your security status in a timely manner.

For details about how to enable and configure Cloud Eye, see Enabling Cloud Eye.

**Table 1** Risk monitoring
Incident Source	Incident	Alert Severity	Description	Handling Suggestion	Impact
SYS.SecMaster	Failed to create an exclusive engine.	Major	The underlying resources are insufficient.	Submit a service ticket to request adequate resources from the O&M personnel and try again.	Tn exclusive engine cannot be created.
SYS.SecMaster	The exclusive engine is not running properly.	Critical	The traffic is too heavy or there are malicious processes or plug-ins.	Check the executions of plug-ins and processes, see if they occupy too many resources. Check the instance monitoring information to see whether there is a sharp instance increase.	The instance cannot be executed.
SYS.SecMaster	Failed to execute the playbook instance.	Minor	Playbooks or processes are wrongly configured.	Check the instance monitoring information to find the cause of the failure, and modify the playbook and process configuration.	None
SYS.SecMaster	The number of playbook instances increases sharply.	Minor	Playbooks or processes are wrongly configured.	Check the instance monitoring information to find the cause of the sharp increase, and modify the playbook and process configuration.	None
SYS.SecMaster	Log messages increase sharply.	Major	The upstream service suddenly generates a large number of logs.	Check whether the upstream service is normal.	None
SYS.SecMaster	Log messages decrease sharply.	Major	Logs generated by the upstream service suddenly decrease.	Check whether upstream services are normal.	None

For details about monitoring alerts, see:

Parent topic: Security

Previous topic: Service Resilience

Next topic: Certificates

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot