Custom Rules

The Custom Rules screen displays the following information:

Table 1. Custom Rules Columns



Alert Level

An alert can be classified as any of the following levels.

  • Critical: The event requires immediate attention

  • Important: The event requires observation

  • Informational: The event requires limited observation


The type of rule that can trigger an alert can be any of the following:

  • Email Security: An email security related rule.

  • Network Security: A network security related rule.


The rule that triggers the alert.

To edit a rule, click on any link in the Rule column.


The advanced search filter used as criteria for this rule.

Check Frequency

The frequency at which the rule criteria are checked.

Last Triggered

The date and time when the alert was last triggered.


Click the toggle to enable or disable the rule.