Actions with response rules

Create a response rule

To create a new response rule, follow these steps:

1. Go to Response rules.

2. Select Add response rule.

3. In the form that opens, complete these fields:

   • rule name;
   • rule description;
   • projects—select the projects where the system will collect events or security issues;
   • response type—select the type of response to events or security issues.

4. If you select Notification, complete these additional fields:

   • events—select multiple events from the system event list;
   • notification tool—select one of the integrations you've created, such as email or a webhook;
   • add recipients in the Add recipients section:
     • Add specific users by the email address in their profile.
     • Add roles to send notifications to users with those roles.
     • Add external email addresses in the "External email addresses" field.

   

5. If you select Create tasks, complete these fields:

   • task tracker—select one of the integrations you've created;
   • filters—set filtering conditions for security issues.

   

   tip

   The Create tasks response type lets you configure which security issues to send to the task tracker.

6. Select Create.

Delete response rules

To delete one response rule, follow these steps:

1. Select the additional actions button () next to the response rule.
2. Select Delete.
3. In the modal window that opens, confirm that you want to delete the response rule.

To delete multiple response rules, follow these steps:

1. Select the security rules using the checkboxes ().
2. Select the delete button () above the rules table.
3. In the modal window that opens, confirm that you want to delete the response rules.