Actions for response rules

Creating a response rule

To create a new response rule, follow these steps:

1. Go to the Response rules section.

2. Select Add response rule.

3. In the form that opens, fill in the fields:

   • Rule name;
   • Rule description;
   • Projects—select the projects where the system will collect events or security issues;
   • Response type—select the type of response to events or security issues.

4. If you select Notification, fill in the additional fields:

   • Events—select one or more events from the system event list;
   • Notification tool—select one of the integrations you've created, such as email or a webhook;
   • Add recipients in the Add recipients section:
     • Add specific users by the email address in their profile;
     • Add roles to send notifications to users with those roles;
     • Add external email addresses in the External email addresses field.

   

5. If you select Create tasks, fill in the fields:

   • Task tracker—select one of the integrations you've created;
   • Filters—set filtering conditions for security issues.

   

   tip

   The Create tasks response type lets you configure which security issues to send to the task tracker.

6. Select Create.

Deleting response rules

To delete one response rule, follow these steps:

1. Select the additional actions button () next to the response rule you need.
2. Select Delete.
3. In the modal window that opens, confirm the deletion of the response rule.

To delete several response rules, follow these steps:

1. Select the security rules using the checkboxes ().
2. Select the delete button () above the rules table.
3. In the modal window that opens, confirm the deletion of the response rules.