You can set up alarms and monitor them in the Health and Wellness interface for the hosts and services in your Security Analytics domain. Alarms display in the view as Active when the Policy-rule-defined statistical thresholds for hosts and services have been crossed. Alarms are grayed out and change to the Cleared status when the clearing threshold has been crossed.
You set up the parameters for alarms in Manage Policies
For the related reference topic, see Alarms View.
To monitor the alarms set up in Security Analytics: