Platform

Featured Integrations

Reduce risk and mitigate cyber attacks, no matter your IT & security stack, maturity journey, or industry

See our Threat Intelligence Solutions in Action

Outcomes

Threat Intelligence solves pervasive challenges

Reduce operational risk through timely, precise, and actionable intelligence.

See Recorded Future’s Intelligence in Action

Products

Services

Research

Minimize operational risks with our timely, precise, and actionable intelligence.

See Recorded Future in Action

Resource Center

Additional Resources

Additional Topics

Resources

Why Recorded Future

About Us

Partner With Us

Join Us

Company

brand-logo-long-black.svg

Rectangular Logo - Digital (RGB).svg

Blog

Careers at Recorded Future

Contact Us

Alert Monitoring Setup

<p>There is no default configuration for alert monitoring. Alert monitoring is configured in <strong>Configuration → Configuration → Alerting Rules</strong>.</p>
<p>When monitoring alerts, the Recorded Future App will poll the Recorded Future API for alerts which match the configured criteria.</p>
<p>By default, the alerts are fetched on the fly when needed by a dashboard.</p>
<h4>Add Alert Monitoring</h4>
<p>To add alert monitoring, click on <strong>Add Alerting Rule</strong> and select the Alerting Rule to fetch alerts from. The following fields then appear:</p>
<div class="image-block-6">
<img src="/wp-content/uploads/recorded_future_alerting_rule.png " alt="Alert Monitoring Setup " class="">
</div>
<table>
<tbody>
<tr>
<td>&nbsp;</td>
<td>&nbsp;</td>
<td>&nbsp;</td>
</tr>
<tr>
<td>Field</td>
<td>Significance</td>
<td>Comment</td>
</tr>
<tr>
<td>Name</td>
<td>Alerting Rule name</td>
<td>Name of the Alerting Rule input.</td>
</tr>
<tr>
<td>Alert Status</td>
<td>Matches any alert status by default</td>
<td>The filter can be configured as needed.</td>
</tr>
<tr>
<td>Time Range</td>
<td>Filters on the timestamp of the alert.</td>
<td>Default is anytime. The notation is the same as in the Recorded Future web client. Ex: 1. “-2d to now” 2. “-2h to -1h” 3. “yesterday”</td>
</tr>
<tr>
<td>Limit</td>
<td>Amount of alerts to fetch</td>
<td>Default is 10. This should be adjusted depending on the amount of alerts that trigger for this rule.</td>
</tr>
<tr>
<td>Alerting Rule</td>
<td>Which alerting rule to fetch</td>
<td>This is the rule that you selected when creating the Alerting Rule input.</td>
</tr>
</tbody>
</table>
<h4>Manage Alerting Rules</h4>
<p>To edit a configured Alerting Rule, just click on <strong>Edit</strong> and the fields will unlock. Click <strong>Save</strong> when done editing the settings.</p>
<p>To remove an Alerting Rule, select the corresponding <strong>Delete Alerting Rule</strong> checkbox and click on <strong>Save</strong>.</p>
<h3>Further Help</h3>
<p>“Recorded Future App for Splunk” has been developed by Recorded Future.</p>
<p>Further information and support can be found on our Support web site: <a href="https://support.recordedfuture.com/hc/en-us/articles/360003588753">support.recordedfuture.com</a></p>

Refine your search

We could not find any results for your search, so why not start with the articles listed below?


Feld	Bedeutung	Kommentar
Name	Name der Warnungsregel	Name der Eingabe der Warnungsregel.
Status der Warnung	Stimmt standardmäßig mit jedem Warnungsstatus überein	Der Filter kann nach Bedarf konfiguriert werden.
Zeitbereich	Filtert nach dem Zeitstempel der Warnung.	Die Standardeinstellung ist jederzeit. Die Notation ist die gleiche wie im Recorded Future-Webclient. Beispiel: 1. "-2d bis jetzt" 2. "-2h bis -1h" 3. "Gestern"
Grenze	Anzahl der abzurufenden Benachrichtigungen	Der Standardwert ist 10. Dies sollte abhängig von der Anzahl der Warnungen angepasst werden, die für diese Regel ausgelöst werden.
Alerting-Regel	Welche Warnungsregel soll abgerufen werden?	Dies ist die Regel, die Sie beim Erstellen der Eingabe der Warnungsregel ausgewählt haben.

Einrichtung der Warnungsüberwachung

Hinzufügen der Warnungsüberwachung

Verwalten von Warnungsregeln

Weitere Hilfe