Once you have configured The Respond Module with a rule(s), Respond will Alert you when these rules are triggered. These Alerts are of course viewable in Analyze.
- Select Customer(s)/Partner, Date Range, and/or Account(s).
- Type Respond into the Filter Event Type(s) field.
- Select SaaS Alerts Respond - Rule Triggered.
- Select Run Report
After running the report, go to View Rule Trigger by clicking on the link icon to find information such as details of Alert(s) that triggered the Respond Rule, Response Action and Rules trigger history.
You will find next to Triggered Because the Alerts that subsequently triggered this Rule based on the Configured Conditions. By selecting the info symbol you will see more detailed information on these conditions.
The taken Response Action will show below the Triggered Because details.
By clicking on the Magnifying Glass Icon will show you more information about an individual Alert Individually.
The History will display the date and time when the Respond rule action took place.
If the rule has been set to "Manual Approval" you will have the follow options available:
Approve: Simply means approving the rule triggers and Respond actions will be taken upon after your approval. A "SaaS Alerts Respond Notice Acknowledged" alert will be generated.
Manually remediated: Should be use when the MSP Admin/User already took the remediated action outside of SaaS Alerts. No actions will be performed by Respond however, the rule will be marked as remediation completed and a "SaaS Alerts Respond - Rule Manually Remediated" alert will be generated.
Reject: The MSP admin of the rule opted out on having Respond taking any actions on the specific rule. A "SaaS Alerts Respond Notice Rejected" alert will be generated.
Pro tip: If the remediation failed you will have the option to Reject, Manually Remediated or Approve the Rule trigger. Respond remind the Rule administrator every 15 minutes after the remediation failed and after the 3rd reminder the rule is set to auto ignored if no action is taken.
Comments
0 comments
Please sign in to leave a comment.