Reducing the number of alerts from a view
Originally Published: 2010-01-13
Article Number
Applies To
Windows
Issue
Is there is a way to summarize the alerts in one output action rather than one for each instance of the alert?
Resolution
To configure the output action edit the suppression interval of the view. Go to manage views > edit the view fot the alert you are trying to amend > select the link for 'alert suppression' for the alert
enVision considers a message to be duplicate is if device address, enVision site, and/or enVision collection node are identical and if the selected message variables are identical.
Related Articles
ESA Alerts Summary Page Does Not Show Stats Number of Views Unrecognized characters in syslog payload not allowing alerts to be processed in RSA Security Operations Management Number of Views SSL write error error:14095412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate Number of Views How to resize the Oracle database alert.log for RSA Identity Governance & Lifecycle Number of Views Previously configured email alerts are no longer triggering in RSA Web Threat Detection Number of Views
Don't see what you're looking for?
