Actions with response rules

Creating a response rule

To create a new response rule, follow these steps:

1. Go to the Response rules section.

2. Select Add response rule.

3. In the form that opens, fill in the fields:

   • Project name;
   • Description;
   • Projects—select the projects where events or security issues will be collected;
   • Response type—select the response type for events or security issues;

   

4. When you select the Notification type, fill in the additional fields:

   • Events—select multiple events from the system event list;
   • Notification tool—select one of the integrations you've created;
   • Add recipients block:
     • Add specific users by the email address in their profile;
     • Add roles to send notifications to users with those roles;
     • Add external email addresses in the "External email addresses" field.

5. When you select the Create tasks type, fill in the fields:

   • Task tracker—select one of the integrations you've created;
   • Filters—filtering conditions for security issues.

   

   tip

   The Create tasks response type lets you configure which security issues to send to the task tracker.

6. Select Create.

Deleting response rules

To delete one response rule, follow these steps:

1. Select the additional actions button () next to the response rule.
2. Select Delete.
3. In the modal window that opens, confirm that you want to delete the response rule.

To delete multiple response rules, follow these steps:

1. Select the security rules using the checkboxes ().
2. Select the delete button () above the rules table.
3. In the modal window that opens, confirm that you want to delete the response rules.