Manage alert profiles

Overview

The manage alerts section provides an overview of all configured alert profiles along with their severity, associated log sources, and notification settings. Based on the Created By type, alert profiles can be edited, deleted, copied, or toggled on/off. Similarly, few alert profiles, however, can only be enabled, disabled, or duplicated and cannot be edited or deleted.

There are three types of alert profiles based on the “Created by” column:

• Log360
  • These are the default, built-in alert profiles.
  • They are not fully modifiable.
  • Users can only do limited actions such as: enable/disable, clone, and update specific configurations (like log sources and notification settings).
  • But users cannot delete or fully edit them.
• Users
  • These are the custom alert profiles created manually by technicians/users.
  • They are fully modifiable.
  • Meaning: you can perform all actions — enable/disable, delete, update completely, and clone.
  • Exception: If it’s a rule-based alert under “Users,” then it behaves like Log360/Extension ones (i.e., only partially modifiable).
• Extension
  • These are alert profiles that come from extensions installed through the Marketplace.
  • Same as Log360 profiles, they are not fully modifiable.
  • Users can only enable/disable, clone, and update specific configurations (log sources & notifications).

Managing alert profiles

1. In the console, navigate to the Alerts tab.

   

2. You will be taken to the Alerts module. Click on Manage Alert Profiles as highlighted in the below image.

   

3. The Manage Profiles page displays the list of all alerts, their profile types, creators, and log sources.

   

   You can:

   • Enable/disable
   • Delete
   • Edit
   • Copy an alert profile
   • Perform bulk actions
   • Filter and sort alerts
4. You can also add a new alert profile by clicking on the Add Alert Profile button as highlighted below. To learn more about creating new alert profiles, refer to the Create Alert Profiles help document.

   

Enable/disable an alert profile

Enabling an alert profile

1. Click on the enable icon present in the ribbon to enable the alert.
2. The alert is now enabled, and a confirmation pop-up briefly appears.

   

Disabling an alert profile

1. Click on the disable icon present in the ribbon to disable the alert.
2. The alert is now disabled, and a confirmation pop-up briefly appears.

   

Delete an alert profile

1. Click on the Delete icon under the Actions column to delete the alert.
2. A Delete Action pop-up appears for confirmation. Click on the checkbox and Yes to proceed.

   

3. Once completed, a success confirmation pop-up appears.

   

Edit an alert profile

1. Click on the Edit icon under the Actions column to modify the respective alert profile.
2. You will be taken to the Edit Alert Profile module. Make the necessary changes to the criteria, severity, or notification settings, and click on Update.

   

3. Upon successful completion of the action, the below pop-up appears, and the alert is saved instantly, and you are redirected back to the Manage Alerts module with the updated alert listed.

   

Clone an alert profile

1. Click on the Clone icon under the Actions column to duplicate the respective alert profile.
2. The alert is instantly duplicated, and you will be instantly taken to the Add Alert Profile module where you can edit the cloned alert profile based on your requirements and save that version on the cloned alert profile.

Bulk actions

1. Select the checkboxes next to the alerts you want to manage.
2. Use the toolbar at the top of the alert list to perform actions in bulk, such as clicking on the Enable, Disable, or Delete icons to perform the desired bulk action.

   

3. Upon successful completion of the action, the following confirmation pop-up appears:
   • When enabled successfully:

     

   • When disabled successfully:

     

   • When deleted successfully:

     

Filtering alert profiles

You can filter alert profiles in the following ways:

1. Based on status (enabled/disabled)
   • Use the filter option above the alerts list to view only enabled or only disabled alert profiles.

     

   • This helps you quickly identify active alerts versus those that are turned off.

     

2. Calendar-based filtering
   • Click on the calendar icon in the filter options.

     

   • The action opens a calendar view along with predefined time ranges for you to choose from. You can also view the count of all triggered alerts based on the time range.

     

     • Click on any of the predefined time ranges available that best suits your requirement.
     • Click on Custom range and enter a number in the box provided to represent the past number of days’ worth of alerts you wish to view.
   • Click on Apply.
   • Upon completion, the alerts list will continue to display all available profiles. However, the alert counts will be filtered and updated based on the selected time range.

More Options

Click on the More Options icon as highlighted below to view the Import and Export actions.

Import alert profiles

• Click on the Import option in the options list.
• Browse and select the file that contains the alert profiles you wish to import.
• If the imported alert profile matches an existing one, you will be prompted to overwrite the existing profile. Select the required profile and click Import.

Export alert profiles

• Select the required alert profiles using the checkbox(es).
• Click on the Export option in the options list.

Read also

This page elaborated a detailed guide on managing alert profiles efficiently. Read more about creating alert profiles, configuring alert notifications, and using playbooks for automated response and monitoring from the below guides:

• Overview
• Create Alert Profile
• Alert Notification & Remediation