Managing the Alarm Whitelist¶
You can configure the alarm whitelist to reduce false alarms. Events can be deleted from the whitelist.
Whitelisted events will not trigger alarms.
On the Alarms page, you can add falsely reported alarms to the alarm whitelist. After an alarm is added to the whitelist, HSS will not generate alarms or collect statistics on it.
Adding Events to the Alarm Whitelist¶
Method | Description |
---|---|
Add to alarm whitelist | Choose to add the alarm to the whitelist when handling it. The following types of events can be added to the alarm whitelist:
|
Checking the Alarm Whitelist¶
Perform the following steps to check the alarm whitelist:
Log in to the management console.
Click in the upper left corner of the page, select a region, and choose Security > HSS. The HSS page is displayed.
In the navigation pane on the left, choose Detection > Whitelists.
Click Alarm Whitelist to view the added alarm whitelist. For more information, see Table 2.
¶ Parameter Name
Description
Alarm Type
Name of the alarm whitelist type.
SHA256
Hash value of the target file.
Description
Description of the target whitelist.
Added
Time when an alarm is added to the whitelist.
Enterprise Project
Enterprise project