Follow these steps to add a rule to match a condition for a particular email address using the Central Management System appliance Web UI.
You can configure a rule to match traffic sent from a particular sender email address or sent to a recipient email address. You can add the relevant tag to this rule for all incoming alerts that contain the specified sender email address or recipient email address.
Note
You can add or delete rules to match a condition for a particular email only using the appliance Web UI.
In the Web UI, choose Settings > CM Settings > Alert Management > Rules.
Click Create Rule. The Create Rule window opens.
.png "CM_AlertRuleEmailAdd_scap.png")
In the Rule Name field, enter the name of the rule.
In the Matching Criteria area:
Choose Email Sender or Email Recipient.
Choose equal to, not equal to, present, or not present as the operation to match the particular email.
Enter the email address of the sender or recipient.
Click Add Condition. The sender email or recipient email condition is added to the match criteria table.
In the Associated Actions area:
Choose Alert Tag Add to add a tag to an alert that includes the rule that contains the matched condition. Or choose Alert Tag Delete to delete a tag from an alert that includes the rule that contains the matched condition.
Enter any value you want to associate with the tag. Select an existing tag or tag/value pair, or enter a new tag or tag/value pair.
Click Add Action. The rule action configuration is added to the associated tag table.
Click Apply.
The following message appears:
.png "CM_AlertRuleAddSuccessMessage_scap.png")