View Your Alerts
|
|
Tell me about permissions
The Manager, Reader, Unit Manager, and Remediation user roles have all the permissions to view, hide, and flag alerts.
How do I view alerts?
- Go to the Alerts section to see alert details for your scanned hosts.
- Select the profile from the Profile menu to see alerts for a specific monitoring profile.
- Select View from the Quick Actions to view more information for any alert in your list.
I don't see any alerts. How do I get started?
- Ensure frequent or continuous scans are scheduled in the VM/VMDR app. Alerts will be generated as your scans finish, and the results are processed.
- For Managers, you'll create a ruleset (what you want to be alerted on) and create a monitoring profile (which hosts you want to monitor and who should be notified).
- For sub-users, you need to talk to your Manager about receiving alerts. A Manager will need to add you to a distribution group in a monitoring profile for the hosts you're interested in. Once you've been added to the profile, you'll be able to see alerts created from that profile. You'll also get email notifications when notifications are enabled.
Still not sure how to get started? Go here to learn more.
Tell me about alert details
- Select View from the Quick Actions menu for any alert to see more details about the alert.
You'll see information on the event that triggered the alert, like the event Category, Date, and Time. You'll also see information about the host to which the alert is related, like the IP address and hostname. Additional details will vary depending on the type of event.
Tell me about the host information
- Click on the IP address in the Host Impacted column to see details about the host to which the alert is related. You can see details like the IP address, Operating System, Hostnames, Open Ports, and Vulnerabilities detected on the host.
This is also a quick way to see all alerts for the host. Go to the Alert Notifications section to see a history of events logged for the host.
Want to flag alerts?
Use flags to mark certain alerts as important. Click the 
flag icon next to the alert in your list. You can quickly find all flagged alerts using the search option above the list area.
Want to hide alerts?
If you have an alert on the list that is not important, you can hide it by selecting Hide from the Quick Actions menu. The alert is immediately hidden from view. You can quickly find hidden alerts using the search option above the list area.
How to search your alerts
The search area above the list allows you to search for alerts by the event category, the impacted host's IP address or hostname, an application name or version, port number, certificate details, and more. Click 
to select specific search criteria or use the search field to set up a search query.
How do I set up notifications?
Edit your monitoring profile and tell us how often you want to be notified. Email notifications can be sent every 5 minutes, every 20 minutes, hourly, daily, weekly, etc. Only new alerts received in the selected time frame will be included in the email. Your notification setting applies to all users selected for the monitoring profile.
For example, on Monday (12th June 2023), if you select the notification frequency as Weekly. You will receive the next notification alert on 19th June 2023, followed by 26th June 2023, and so on.
You will receive email notifications only if the scan is successful and alerts are observed.