Updated on September 20, 2023

Manage User Risk Exchange Business Rules

Manage User Risk Exchange Business Rules

A write-access user can manage User Risk Exchange Business Rules.

View User Risk Exchange Business Rules

View business rules in either list view or grid view. Toggle between the grid and list views using the button beside the Refresh button.

RE-View-Business-Rules.png

You can expand each folder to see the business rules in that folder, and also delete a whole folder of business rules.

RE-View-Business-Rule-Folders.png

Create User Risk Exchange Business Rules

A write-access user can configure User Risk Exchange queries towards users, allowing them to specify which users to take actions upon.

  1. Go to User Risk Exchange > Business Rules.
  2. Click Create New Rule.
    image3.png
  3. Enter a rule name.
  4. Select or enter a query in the alert filter. At least one filter must be selected.

    Tip

    Filters can be copied from the alert table and applied to a business rule.

  5. Enter the folder name that you want to add it to, or you can select the existing folders. At max we can go up to 3 level of hierarchy.
  6. Click Save.
    image4.png

Perform Action on User Risk Exchange Business Rules

You can manage all the business rules from a single place on the platform at the Business Rules page. A write-access user can mute one or multiple business rules, edit the query for business rules, or delete the business rules or Test the Business Rule from this page.

image5.png

Clone a User Risk Exchange Business Rule

You can clone the business rule, including Mute rules. If you enable the checkbox, then mute rules that are under the business rule will also be cloned to the new business rule.

RE-Clone-Rule.png

Mute a User Risk Exchange Business Rule

Muting can be used to temporarily ignore any changes to users or hosts scores that would normally trigger the action workflow.

image6.png

Delete User Risk Exchange Business Rules

To delete a business rule, select the Trash icon on the rule and confirm the action.

image7.png

Add or Delete Muting Rules to User Risk Exchange Business Rules

This function is used to mute known and acknowledged changes to a user or host matching some specific criteria. For example, a write-access user could mute a particular user so that no new actions are performed for that business rule on that user.

image8.png
image9.png

Map a User Risk Exchange Business Rule to an Action

Users can map business rules with actions so that when a user or host matches a business rule, the configured action will be performed on the user.

  1. Go to User Risk Exchange > Actions.
  2. Click Add Action Configuration.
    image10.png
  3. Select Business Rule, and then Configuration.
  4. Based on the selected configuration, a list of Actions will be populated. Select an action that you want to map to the business rule.
  5. If the action has some required parameters, user will need to fill those out as well.
    image11.png
  6. Enable Generate Alert if you would like to receive alerts in the Ticket Orchestrator module whenever an action is performed. Using this feature, user can receive alerts into your ITSM platform or receive notifications when an action is performed on users or hosts. Note that this feature requires that the Ticket Orchestrator module to be enabled.
  7. Click Save.
Share this Doc

Manage User Risk Exchange Business Rules

Or copy link

In this topic ...