Actions with response rules

Create a response rule

To create a new response rule, follow these steps:

1. Go to Response rules.

2. Select Add response rule.

3. In the form that opens, fill in the fields:

   • rule name;
   • rule description;
   • projects—select the projects where the system will collect events or security issues;
   • response type—select the response type for events or security issues.

4. If you select the Notification type, fill in the additional fields:

   • events—select multiple events from the system event list;
   • notification tool—select from the available integrations (email or webhook);
   • also add recipients in the Add recipients section:
     • Add specific users by the email address in their profile.
     • Add roles to send notifications to users with those roles.
     • Add external email addresses in the "External email addresses" field.

   

5. If you select the Task creation type, fill in the fields:

   • task tracker—select from the available integrations;
   • filters—filtering conditions for security issues.

   

   tip

   The Task creation response type lets you configure which security issues to send to the task tracker.

6. Select Create.

Delete response rules

To delete one response rule, follow these steps:

1. Select the additional actions button () next to the response rule.
2. Select Delete.
3. In the modal window that opens, confirm the deletion of the response rule.

To delete multiple response rules, follow these steps:

1. Select the security rules using the checkboxes ().
2. Select the delete button () above the rules table.
3. In the modal window that opens, confirm the deletion of the response rules.