Reviewing triggers

Triggers are the complex rules that are configured to notify you of significant system events, and can be set up to automatically act against suspicious activity. Triggers are categorized into 2 types:

• Notices — triggers that have a risk level of 0, and are intended to inform you of noteworthy events.
• Violations — triggers that have a risk level of 1-5, and generate an alert that needs to be investigated and resolved. These alerts are listed on the Home page and the Alerts page.

The Triggers page displays all the triggers that have been configured for your system.

At the top of the page are 3 charts that help identify the level of trigger activity in the system:

1. Trigger activity (Past month)
2. Triggers by risk level
3. Top violations — as defined by the configured triggers

The remainder of the page displays a list of the configured triggers. The list provides an overview of the trigger names, descriptions, status and configured response actions:

• Click on the far right to show or hide headings that are relevant to you.
  • Select Toggle density to change the amount of spacing in each row.
• Click a heading to sort the list by that heading.
• Click and drag a heading to move the column left or right.
• At the end of a trigger row, select > Subscribe to receive an email notification each time the trigger occurs.

  For more information about the other options in the trigger menu, see Managing triggers.

• Click a trigger to expand the row to show the following details:
  • The Trigger activity chart for the selected trigger.
  • The specific trigger conditions.

    By default only the first two conditions are displayed. Hover over the Conditions area and use your scroll wheel to scroll up and down to see the other conditions.

  • To create a new report based on the configured trigger conditions, click Insights.

    For more information, see Creating a report.

  • To see each instance of the trigger that generated an alert, click Alerts.

    For more information, see Monitoring alerts.

 

The left menu pane gives you access to trigger filters.

If you do not see the left menu pane, swipe to the left browser edge to show the menu.

• Click a trigger group name to filter the listed triggers down to the ones in the selected group.
• Click Archived to see triggers that are no longer used.

For more information about the options in the left menu pane, see Managing triggers.