USM Anywhere enables you to create and manage your own orchestration rules from the EventsAny traffic or data exchange detected by AlienVault products through a Sensor, or through external devices such as a firewall. details pages, which is the easiest way to configure an orchestration rule.
You can create these rules:
- Create Suppression Rule: You can create a rule to suppress alarmsAlarms provide notification of an event or sequence of events that require attention or investigation. that match a particular set of criteria. See Creating Suppression Rules from the Alarms Page and Suppression Rules from the Orchestration Rules page for more information.
- Create Notification Rule: You can create a notificationCommunication of an important event, typically through an email message or other desktop display. In USM Appliance, notifications are typically triggered by events, policies, and correlation directives, and in USM Anywhere, they are typically triggered by notification rules or directly from alarms. rule according to a method. See Creating Notification Rules from the Alarms Page and Orchestration Rules