Reporting: Edit an Alert

Document created by RSA Information Design and Development Employee on Jun 26, 2017
Version 1Show Document
  • View in full screen mode

This topic provides instructions on how to edit an alert. 


Make sure that:

  • You have understood the components of the Alert view. For more information, see Alert View.
  • You have understood the components of the Create or Modify Alert view. For more information, see Create or Modify Alert View.


Perform the following steps to edit an alert:

  1. In the Security Analytics menu, click Administration Reports.
    The Manage tab is displayed.
  2. Click Alerts.
    The Alert view is displayed.
  3. In the Alert List panel, select an alert and click edit_button.png.
    The Create/Modify Alert tab is displayed.
  4. In the Rule Basis field, navigate the rule tree and select another rule.
    The Rule name is displayed in the Rule Basis field.
  5. (Optional) Select a data source from the Data Sources drop-down list.

Note: If the data source is not listed, then ensure you have Read permissions set for the data source. This is applicable for NWDB and Warehouse data source. For more information, see Configure Data Source Permissions topics in the Host and Services Configuration Guide.

  1. (Optional) Modify the alert description in the Description field.
  2. Modify the appropriate Notification tabs – RECORD, SMTP, SNMP, and Syslog.
  3. Click Create.
    A confirmation message that the alert is edited successfully is displayed.
Previous Topic:Disable an Alert
Next Topic:Enable an Alert
You are here
Table of Contents > Working with Alerts in the Reporting Module > Define Alerts > Edit an Alert