Platform

Featured Integrations

Reduce risk and mitigate cyber attacks, no matter your IT & security stack, maturity journey, or industry

See our Threat Intelligence Solutions in Action

Outcomes

Industries

Threat Intelligence solves pervasive challenges

Reduce operational risk through timely, precise, and actionable intelligence.

See Recorded Future’s Intelligence in Action

Products

Services

Research

Experience our platform live every week. Minimize risks with timely, actionable threat intelligence that helps you stay ahead of threats.

Join our Weekly Platform Preview

Resource Center

Additional Resources

Additional Topics

Resources

Why Recorded Future

About Us

Partner With Us

Join Us

Company

brand-logo-long-black.svg

Rectangular Logo - Digital (RGB).svg

Home

Blog

Contact Us

Alert Monitoring Setup

<p>There is no default configuration for alert monitoring. Alert monitoring is configured in <strong>Configuration → Configuration → Alerting Rules</strong>.</p>
<p>When monitoring alerts, the Recorded Future App will poll the Recorded Future API for alerts which match the configured criteria.</p>
<p>By default, the alerts are fetched on the fly when needed by a dashboard.</p>
<h4>Add Alert Monitoring</h4>
<p>To add alert monitoring, click on <strong>Add Alerting Rule</strong> and select the Alerting Rule to fetch alerts from. The following fields then appear:</p>
<div class="image-block-6">
<img src="/wp-content/uploads/recorded_future_alerting_rule.png " alt="Alert Monitoring Setup " class="">
</div>
<table>
<tbody>
<tr>
<td>&nbsp;</td>
<td>&nbsp;</td>
<td>&nbsp;</td>
</tr>
<tr>
<td>Field</td>
<td>Significance</td>
<td>Comment</td>
</tr>
<tr>
<td>Name</td>
<td>Alerting Rule name</td>
<td>Name of the Alerting Rule input.</td>
</tr>
<tr>
<td>Alert Status</td>
<td>Matches any alert status by default</td>
<td>The filter can be configured as needed.</td>
</tr>
<tr>
<td>Time Range</td>
<td>Filters on the timestamp of the alert.</td>
<td>Default is anytime. The notation is the same as in the Recorded Future web client. Ex: 1. “-2d to now” 2. “-2h to -1h” 3. “yesterday”</td>
</tr>
<tr>
<td>Limit</td>
<td>Amount of alerts to fetch</td>
<td>Default is 10. This should be adjusted depending on the amount of alerts that trigger for this rule.</td>
</tr>
<tr>
<td>Alerting Rule</td>
<td>Which alerting rule to fetch</td>
<td>This is the rule that you selected when creating the Alerting Rule input.</td>
</tr>
</tbody>
</table>
<h4>Manage Alerting Rules</h4>
<p>To edit a configured Alerting Rule, just click on <strong>Edit</strong> and the fields will unlock. Click <strong>Save</strong> when done editing the settings.</p>
<p>To remove an Alerting Rule, select the corresponding <strong>Delete Alerting Rule</strong> checkbox and click on <strong>Save</strong>.</p>
<h3>Further Help</h3>
<p>“Recorded Future App for Splunk” has been developed by Recorded Future.</p>
<p>Further information and support can be found on our Support web site: <a href="https://support.recordedfuture.com/hc/en-us/articles/360003588753">support.recordedfuture.com</a></p>

Refine your search

We could not find any results for your search, so why not start with the articles listed below?


필드	중요성	설명
이름	알림 규칙 이름	알림 규칙 입력란의 이름입니다.
알림 상태	기본적으로 모든 알림 상태와 일치	필터는 필요에 따라 구성할 수 있습니다.
시간 범위	알림의 타임스탬프를 필터링합니다.	기본값은 언제든지입니다. 표기법은 레코딩된 미래 웹 클라이언트에서와 동일합니다. 예: 1. "-2일에서 지금까지" 2. "-2시간에서 -1시간" 3. "어제"
제한	가져올 알림의 양	기본값은 10입니다. 이 규칙에 대해 트리거되는 알림의 양에 따라 이 값을 조정해야 합니다.
알림 규칙	가져올 알림 규칙	알림 규칙 입력을 만들 때 선택한 규칙입니다.

알림 모니터링 설정

알림 모니터링 추가

알림 규칙 관리

추가 도움말