Request a new alert configuration rule

If you are a primary or secondary contact in your organization, there are some alert configuration rules that you can manage directly in the Arctic Wolf® Unified Portal. For more information, see Manage alert configurations.

Otherwise, complete these steps to request a new alert configuration rule.

These resources are required:
  • Permissions d'administrateur pour Arctic WolfUnified Portal.

    Vous devez être un contact principal ou secondaire. Si vous avez besoin de ce niveau d'accès, envoyez votre demande à un contact principal ou secondaire de votre organisation, ou cliquez sur Request an Update. Pour plus d'informations, consultez Demander une mise à jour de règle de configuration d'alerte.

  1. Connectez-vous à Arctic Wolf Unified Portal.
  2. Dans le menu de navigation, cliquez sur Profil de l'organisation > Règles de configuration des alertes.
  3. Click Request New Configuration.
  4. In the Request Subject field, briefly describe the alert you want to change.
  5. Optional: Add a related ticket.
  6. In the Request Details field, enter a detailed description of your alert configuration rule update request. If applicable, include information about the relevant application, server, host device, username, and network or system event. If applicable, specify the dates and times when this rule should be active.
    For example:
    • Allow cloud service sign-in from Canada.
    • Do not alert if user jane.doe@example.com assigns administrator permissions to another user in Office 365.
    • Do not alert if user john.doe@example.com signs in to a cloud service from New Zealand between August 10, 2023 and October 30, 2023.
  7. Optional: Attach a file.
  8. Click Submit Request.