Press CTRL+K to open search

Enabling Real-Time Indicator Detection for Selected Host Sets

  • Published on Sep 8, 2026
  • 1 minute(s) read
Prev Next

To enable the real-time indicator detection on select host sets:

Note

See Creating a Custom Policy for more information about using the Web UI to create a custom policy.

  1. Log in to the Web UI as an administrator.

  2. From the Admin menu, select Policies to access the Policies page.

  3. From the Policies table, click the link for the custom policy you want to modify.

  4. Click the Real-Time Indicator Detection tab.

    Policy_RTID_Tab.png

  5. Toggle the Real-Time Indicator Detection ON/OFF switch to ON to enable real-time indicator detection.

  6. Click Save.

    Policy_RTID_Enable.png

Note

Enabling real-time indicator detection launches the following process:

/opt/fireeye/bin/rte-sensor

See Real-Time Indicator Detection Sensor for additional features of the rte-sensor process.

Now you can assign host sets to the custom policy and set the policy priority level. See Assigning Host Sets to Agent Policies and Configuring Policy Priority Using the Web UI for more information.

:
Related articles