cancel
Showing results for 
Search instead for 
Did you mean: 
socgt
Level 7

Setting alarms on multiple same events

Jump to solution

Hello Experts,

I wanna have your opinion on the implementation of alarms on multiple same events triggering in SIEM.

If multiple times or a specific number of times an event is generated from device the alarm should be generated.

Is it possible to accomplish this. ?

Thanks

0 Kudos
1 Solution

Accepted Solutions
abanaru
Level 11

Re: Setting alarms on multiple same events

Jump to solution

Yes. Create an alarm and go for Condition Type = Specified Event Rate. Make sure you filter for your desired Signature ID.

0 Kudos
2 Replies
abanaru
Level 11

Re: Setting alarms on multiple same events

Jump to solution

Yes. Create an alarm and go for Condition Type = Specified Event Rate. Make sure you filter for your desired Signature ID.

0 Kudos
socgt
Level 7

Re: Setting alarms on multiple same events

Jump to solution

Thank You so much for the info...really helpfull

0 Kudos