AlienVault® USM Anywhere™

Labeling the Alarms

Role Availability Read-Only Analyst   Manager

USM Anywhere includes a set of labels to further classify your alarms and later use them. See Searching Alarms for more information.

You can not edit or delete the set of default labels:

Select a label popup window

USM Anywhere enables you to create, edit, and delete your own labels. You can apply a label to one or more alarms. You can also apply multiple labels to the same alarm. To distinguish between label and status, see Differences between Statuses and Labels.

To label an alarm from the alarms main page

  1. Go to Activity > Alarms.
  2. Search for the alarm or alarms you want to apply a label. See Searching Alarms, for more information.
  3. Select the checkbox to the left of the alarm.
  4. Click Apply Labels.
  5. Apply Labels button on the alarms main page

  6. Select the label that you want to apply. See Labeling the Alarms, for more information.
  7. Click Apply.

Note: You can also label an alarm from the Labels column of the alarm list view by clicking the icon.

To label an alarm from the alarms details page

  1. Go to Activity > Alarms.
  2. Search the alarm you want to apply a label. See Searching Alarms for more information.
  3. Click the alarm.
  4. In the Labels field, click the icon to select a label.
  5. Click Apply.

To create a new label

  1. Go to Activity > Alarms.
  2. Select the checkbox to the left of an alarm. You can also select several of them or select all alarms at the same time by selecting the first checkbox in the column.
  3. Click Apply Labels.
  4. Click Create New Label.
  5. Type a name for the label.
  6. Select a color for identifying the label.
  7. Click Save.

To edit a label

  1. Go to Activity > Alarms.
  2. Select the checkbox to the left of an alarm. You can also select several of them or select all alarms at the same time by selecting the first checkbox in the column.
  3. Click Apply Labels.
  4. Click Manage Labels.
  5. Click the icon next to the label you want to edit.
  6. Modify the name of the label or its color.
  7. Click the icon to apply the changes.

To remove a label from an alarm

  1. Go to Activity > Alarms.
  2. Select the checkbox to the left of an alarm. You can also select several of them or select all alarms at the same time by selecting the first checkbox in the column.
  3. Click Remove Alarm Labels.
  4. Select the label or labels you want to remove.
  5. Click Remove.