Platform

Featured Integrations

Reduce risk and mitigate cyber attacks, no matter your IT & security stack, maturity journey, or industry

See our Threat Intelligence Solutions in Action

Outcomes

Industries

Threat Intelligence solves pervasive challenges

Reduce operational risk through timely, precise, and actionable intelligence.

See Recorded Future’s Intelligence in Action

Products

Services

Research

Experience our platform live every week. Minimize risks with timely, actionable threat intelligence that helps you stay ahead of threats.

Join our Weekly Platform Preview

Resource Center

Additional Resources

Additional Topics

Resources

Why Recorded Future

About Us

Partner With Us

Join Us

Company

brand-logo-long-black.svg

Rectangular Logo - Digital (RGB).svg

Home

Blog

Careers

Contact Us

Alert Monitoring Setup

<p>There is no default configuration for alert monitoring. Alert monitoring is configured in <strong>Configuration → Configuration → Alerting Rules</strong>.</p>
<p>When monitoring alerts, the Recorded Future App will poll the Recorded Future API for alerts which match the configured criteria.</p>
<p>By default, the alerts are fetched on the fly when needed by a dashboard.</p>
<h4>Add Alert Monitoring</h4>
<p>To add alert monitoring, click on <strong>Add Alerting Rule</strong> and select the Alerting Rule to fetch alerts from. The following fields then appear:</p>
<div class="image-block-6">
<img src="/wp-content/uploads/recorded_future_alerting_rule.png " alt="Alert Monitoring Setup " class="">
</div>
<table>
<tbody>
<tr>
<td>&nbsp;</td>
<td>&nbsp;</td>
<td>&nbsp;</td>
</tr>
<tr>
<td>Field</td>
<td>Significance</td>
<td>Comment</td>
</tr>
<tr>
<td>Name</td>
<td>Alerting Rule name</td>
<td>Name of the Alerting Rule input.</td>
</tr>
<tr>
<td>Alert Status</td>
<td>Matches any alert status by default</td>
<td>The filter can be configured as needed.</td>
</tr>
<tr>
<td>Time Range</td>
<td>Filters on the timestamp of the alert.</td>
<td>Default is anytime. The notation is the same as in the Recorded Future web client. Ex: 1. “-2d to now” 2. “-2h to -1h” 3. “yesterday”</td>
</tr>
<tr>
<td>Limit</td>
<td>Amount of alerts to fetch</td>
<td>Default is 10. This should be adjusted depending on the amount of alerts that trigger for this rule.</td>
</tr>
<tr>
<td>Alerting Rule</td>
<td>Which alerting rule to fetch</td>
<td>This is the rule that you selected when creating the Alerting Rule input.</td>
</tr>
</tbody>
</table>
<h4>Manage Alerting Rules</h4>
<p>To edit a configured Alerting Rule, just click on <strong>Edit</strong> and the fields will unlock. Click <strong>Save</strong> when done editing the settings.</p>
<p>To remove an Alerting Rule, select the corresponding <strong>Delete Alerting Rule</strong> checkbox and click on <strong>Save</strong>.</p>
<h3>Further Help</h3>
<p>“Recorded Future App for Splunk” has been developed by Recorded Future.</p>
<p>Further information and support can be found on our Support web site: <a href="https://support.recordedfuture.com/hc/en-us/articles/360003588753">support.recordedfuture.com</a></p>

Refine your search

We could not find any results for your search, so why not start with the articles listed below?


畑	意味	コメント
名前	アラートルール名	アラートルール入力の名前。
アラートステータス	既定で任意のアラート状態と一致します	フィルターは必要に応じて構成できます。
時間範囲(Time Range)	アラートのタイムスタンプでフィルター処理します。	既定値は [anytime] です。表記は、Recorded Future Web クライアントと同じです。例: 1. "-2d to now" 2.「-2h から -1h」 3.「昨日」
極限	フェッチするアラートの量	既定値は 10 です。これは、このルールに対してトリガーされるアラートの量に応じて調整する必要があります。
アラートルール	フェッチするアラートルール	これは、アラートルール入力の作成時に選択したルールです。

アラート監視の設定

アラート監視の追加

アラートルールの管理

さらにヘルプ

アラート監視の設定

アラート監視の追加

アラート ルールの管理

さらにヘルプ

アラートルールの管理