Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Trying to disable an email alert

$
0
0

We can do it!

 

  1. Go to Explore --> nDepth
  2. Open the "Events" drawer and find "InternalRuleFired"
  3. From the list of fields, click on "ExtraneousInfo" and drag it up to the search bar
    • You should now have something like "InternalRuleFired.ExtraneousInfo="
  4. On the other side of the equals, type *email*
  5. Run your search

 

This should get you every rule that has fired that triggered the "Send E-mail" action.  Then you can look at the list of rules that fired (open the "Refine Results" drawer and look under the "Inference Rules" category) and disable or modify the ones that are driving you mad.


Viewing all articles
Browse latest Browse all 5385


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>