Create alarms that notify users of events or flows that might pose a threat.
Make sure that the ePO is connected to the system and that alarm management is enabled on that ePO.
From the Trellix ESM dashboard, click
.Under System Settings, click Alarms Management.
Click + Add.
Enter the details under Summary.
Enter Name.
Select Assignee.
Configure the trigger condition under Condition.
Select the Type.
Click
to filter the results.
Under Devices, select at least one device to get events from.
Under Actions, select the actions and click
to configure the settings.Click Save.
The alarm is listed on the Alarms Management page and appears in the Alarms Dashboard when triggered.