Reporting: Alert View

Document created by RSA Information Design and Development Employee on Sep 14, 2017Last modified by RSA Information Design and Development Employee on Sep 8, 2020
Version 18Show Document
  • View in full screen mode

The Alert List view allows you to import, export, manage, and add alerts.


alert list view workflow

What do you want to do?

RoleI want to...Documentation

Administrator/ Analyst

Configure Reporting Engine

Configure Reporting Engine

Administrator/ Analyst

Configure an alert

Configure an Alert

Administrator/ Analyst

Schedule an alertSchedule an Alert

Administrator/ Analyst

View an alert

View an Alert

Administrator/ AnalystInvestigate an alertInvestigate an Alert
Administrator/ AnalystManage an alert and alert template*Manage an Alert and Alert Template

*You can complete these tasks here.

Related Topics

Alerting Overview

Quick View

The following figure is an example with the important features labeled.

1Click Alerts to open the Alert view.

The Alert toolbar allows you to add, modify, delete, enable, disable, refresh, import, and export an alert. Using this toolbar, you can also set access permissions for the selected alert.

3The Alert panel lists all the alerts in a tabular format.

The Alerts List view has the following panels:

  • Alert Toolbar
  • Alert

Alert Toolbar

The Alert toolbar panel has the following features:

Adds a new alert to the Reporting module.
Deletes one or more selected alerts.
Edits an alert.
Enable Enables the selected alerts.
Disable Disables the selected alerts.
Refreshes the view.
Enables the following options: Import, Export and Permissions.


The Alert panel lists all the alerts in a tabular format. The following table lists the columns in the Alert panel and their descriptions.


Displays the state of the alert:

  • Enabled - the alert is active and fires based on the rule assigned to it.
  • Disabled - the alert is not active.

Indicates whether the alert is sent to Decoders or Log Decoders:

  • Yes - Alert is pushed to Decoders or Log Decoders.
  • No - Alert is not pushed to Decoders or Log Decoders.

Identifies the name of the alert. Clicking the alert name displays the rule on which this alert is based in the Define Rules panel.


Indicates the alert description.


Indicates the action the system takes when the alert fires. The different available action types are as follows:

  • Record
  • SMTP
  • SNMP
  • Syslog
Previous Topic:Alerting References
You are here
Table of Contents > Alerting References > Alert List View