Enabling and disabling customer rule alerting

By default, alerting is enabled for a customer rule when it is created.

You can enable and disable alerting for customer rules when you edit them. The only way to disable alerting for a Trellix rule is to disable the rule entirely. See Enabling and disabling rules.

To disable alerting for a customer rule:

From the main menu, select Configure > Rules.
Select the Customer Rules tab.
Click on the name of the rule you want to edit, or select View / Edit from the Options menu. The Rule window will appear.
Click the Edit () icon in the upper right corner of the Rule window.
Set the Generate Alerts toggle to OFF in the Update Rule window.
Click Update Rule.

To enable alerting for a customer rule:

From the main menu, select Configure > Rules.
Select the Customer Rules tab.
Click on the name of the rule you want to edit, or select View / Edit from the Options menu. The Rule window will appear.
Click the Edit () icon in the upper right corner of the Rule window.
Toggle the Generate Alerts switch to ON in the Update Rule window.
Click Update Rule.