|
The Manager, Reader, Unit Manager, and Remediation user roles have all the permissions to view, hide, and flag alerts.
Go to the Alerts section. You'll see alert details for your scanned hosts. To see alerts for a specific monitoring profile, select the profile from the Profile menu. To view more details for any alert in your list, select View from the Quick Actions menu.
First make sure that you have frequent or continuous scans scheduled in the VM/VMDR app. Alerts will be generated as your scans finish and the results are processed.
For Managers, you'll create a ruleset (what you want to be alerted on) and create a monitoring profile (which hosts you want to monitor and who should be notified).
For sub-users, you need to talk to your Manager about receiving alerts. A Manager will need to add you to a distribution group in a monitoring profile for the hosts you're interested in. Once you've been added to the profile, you'll be able to see alerts created from that profile. You'll also get email notifications when notifications are enabled.
Still not sure how to get started? Go here to learn more.
Select View from the Quick Actions menu for any alert to see more details about the alert. You'll see details about the event that triggered the alert like the event category and the date and time of the event. You'll also see information about the host that the alert is related to like the IP address and hostname. Additional details will vary depending on the type of event.
Click on the IP address in the Host Impacted column to see details about the host that the alert is related to. You can see details like the IP address, operating system, hostnames, open ports on the host and vulnerabilities detected on the host.
Tip - This is also a quick way to see all alerts for the host. Go to the Alert Notifications section to see a history of events logged for the host.
Use flags to mark certain alerts as important. Simply click the
flag icon next to the alert in your list. You can quickly find all flagged
alerts using the search option above the list area.
If you have an alert on the list that is not important, you can hide it by selecting Hide from the Quick Actions menu. The alert is immediately hidden from view. You can quickly find hidden alerts using the search option above the list area.
The search area above the list allows you to search for alerts by the
event category, the impacted host's IP address or hostname, an application
name or version, port number, certificate details, and more. Click
to select specific search criteria or use the search field to set up a
search query.
Edit your monitoring profile and tell us how often you want to be notified. You can have email notifications sent every 5 minutes, every 20 minutes, hourly, daily, weekly, etc. Only new alerts received in the selected time frame will be included in the email. Your notification setting applies to all users selected for the monitoring profile.