The Alert Rules page provides a graphical representation of the top 5 Security and UEBA alerts by the rule type and the number of rules that have been enabled or disabled.

The Alert Rules page also lists the preconfigured rules in a table where you can enable or disable the alert. Click the Edit icon to customize the alert rules for the preconfigured alerts.

About the Alert Rules Page

On the Alert Rules page (Alerts > Alert Rules), you can do the following:

1. View the top 5 Security alerts by rule name.
2. Select the time period to display the top 5 alerts.
3. View the top 5 UEBA alerts by rule name.
4. Select the time period to display the top 5 alerts.
5. View the total number of enabled or disabled alert rules.
6. Add a new alert rule.
7. Edit an existing alert rule.
8. Delete an existing alert rule.