USM Anywhere allows you to create and manage your own orchestration rules from the EventsAny traffic or data exchange detected by AlienVault products through a Sensor, or through external devices such as a firewall. details pages, which is the easiest way to configure an orchestration rule.
You can create
- Suppression Rule, see Creating Suppression Rules from the Events page and Suppression Rules from the Orchestration Rules page for further information.
- Filtering Rule, see Creating Filtering Rules from the Events page and Filtering Rules from the Orchestration Rules page for further information.
- AlarmAlarms provide notification of an event or sequence of events that require attention or investigation. Rule, see Creating Alarm Rules from the Events page and Correlation Rules for further information.
- Notification Rule, see Creating Notification Rules from the Events Page and Correlation Rules for further information.
Important: The Create Filtering Rule option is not visible if the Agent has sent the event.