(optional) Modifying an ALERT in a Rule: using the MODIFY function
For an ALRT event, you can use a Rule to change any of the original ALERT’s settings (except Key, Queue, and Target) before it appears in an ALERT queue.
The ability to modify an ALERT makes it convenient for you to select already existing ALERTs with which to use the Retain or Escalate functions without having to rewrite the ALERTs. For example, any existing ALERT can be modified by a Rule using the MODIFY function on the Alert Action(s) panel I to
- survive a BBI-SS PAS cold start (with the Retain keyword)
- increase or decrease in severity over user-specified intervals of time (with the Escalate keyword)
- change any of the ALERT’s existing values (except Key, Queue, and Target) to new values
This section contains the following topics:
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*