Follow these steps to edit a rule that is used to manage an alert tag on a managed appliance using the Central Management System appliance Web UI.
Note
You can edit rules for an alert tag only using the Web UI.
Usage Guidelines
Follow these usage guidelines when you edit a rule to manage an alert tag on a managed appliance:
A rule must contain at least one condition and one action. If you want to delete a condition or action, you must delete a rule.
A rule can contain one condition and multiple actions. If you want to delete an action, you must delete the action. If you want to delete a condition, you must delete a rule.
A rule can contain multiple conditions and one action. If you want to delete a condition, you must delete the condition. If you want to delete an action, you must delete a rule.
Access to the Web UI of the Central Management System appliance as Admin or Analyst
You have added one or more tags to a database on a managed appliance. For details about how to add a tag to an alert, see Adding Tags Using the Web UI .
You have added one or more rules to a managed appliance. For details about how to configure rules to manage a tag, see Configuring Rules to Manage Alert Tags .
In the Web UI, choose Settings > CM Settings > Alert Management > Rules.
In the table, locate the rule you want to edit.
.png "CM_AlertRuleTableEdit_scap.png")
Click the action icon (
.png "CM_AlertMgmtAction_icon.png")
) in the Actions column.Click Edit. The Edit Rule window opens.
.png "CM_AlertRuleEdit_scap.png")
In the Rule Name field, edit the name of the rule.
In the Matching Criteria area:
Choose the relevant match criteria and operation from the drop-down list.
Enter the relevant value.
Click Add Condition. The condition is added to the match criteria table.
Locate the condition you want to delete in the table.
Click the Delete (trash can) icon. The condition that was previously used in the rule is deleted.
In the Associated Actions area:
Choose Alert Tag Add to add a tag to an alert that includes the rule that contains the matched condition. Or choose Alert Tag Delete to delete a tag from an alert that includes the rule that contains the matched condition.
Enter any value you want to associate with the tag. Select an existing tag or tag/value pair, or enter a new tag or tag/value pair.
Click Add Action. The rule action configuration is added to the associated tag table.
Click the Delete (trash can) icon. The tag that was previously used in the rule is deleted.
Click Apply.
The following message appears:
.png "CM_AlertRuleEditSuccessMessage_scap.png")