3 months ago
Entity Monitoring: Rules Management Enhancement
announcement
This week we are excited to announce new enhancements to our Entity Monitoring Rules Management system. These updates introduce more flexibility and precision in creating and managing rules. Key features include:
Entity Monitoring Rules Management:
- Rules can now be defined based on the entity, not just the event.
Rule Categories:
- Policy Enforcement: Standard rules for enforcing policies.
- Policy Forecasting: Includes logic for comparing different time periods using multipliers.
- Custom (Event-Based): Allows for event-specific rule creation.
Advanced Rule Settings:
- Combine "and" and "or" conditions within the same rule for greater complexity.
- Combine "and" and "or" conditions within the same rule for greater complexity.
Alert Management:
- Set alert priorities and automatically create cases when alerts are triggered.
- Set alert priorities and automatically create cases when alerts are triggered.
Target Assignment:
- All rules must be assigned a specific target.
- Note: Calculations based on a target are pending implementation.
Additional Enhancements:
- Filters for Policy Targets and Segmentation: New filters have been added, allowing for more precise definitions and usage.
fix
- Resolved an issue with the velocity rule involving actual currency.
- Fixed a Single Sign-On (SSO) problem.
- Addressed issues related to rules not properly displaying in Events 2.0.