Threat Alerts

Reply
Highlighted
L1 Bithead

Threat Alerts

I have configured Threat alerts to be emailed. This is working, however I'm getting information level alerts. I have setup a filter to only mail critical or high. I built this filter under objects/log forwarding, then log type threat. Is this the correct location? I would like to not see any log lower the medium level. How do I stop getting information alerts?

 

Thanks,

 

 

Highlighted
Cyber Elite

@sjturner66,

Can you post a screenshot of the way you have the log-forwarding configured. If configured correctly you shouldn't be getting anything that you haven't specified unless it's matching something else in your log-forwarding policy. 

Highlighted
L1 Bithead

Capture.JPG

Highlighted
Cyber Elite

That's interesting, I don't see any reason why you would be getting informational alerts from what's on the screenshot. I might try reaching out to TAC and seeing if they can get it to mimic with their equipment. 

Highlighted
L1 Bithead

Ok...that is what I was thinking as well. Below is a shot of the alerts I'm getting.Capture-1.JPG

 

Capture-3.JPG

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!