Alert and Log actions

Alert actions

Alert actions are only available through the policy builder for data UI for session-level policies and are not supported for advanced session-level policies. The following alert actions are available:
  • Alert daily
  • Alert once per session
  • Alert only
  • Alert per match
  • Alert per time granularity
Alert actions allow an exception message that is added as part of the last error description in the alert message. Some alert actions also support the distinct (DISTINCT) parameter.
Note: Alerting actions are not available for advanced session-level policies created using the SR language.

Log actions

  • 12.1 and later Audit only
  • Log access only
  • Log exception
  • Log full details
  • 12.1 and later Log full details with replaced values
  • 12.1 and later Log masked details
  • 12.1 and later Log Extrusion Counter
  • 12.1 and later Log Masked Extrusion Counter
  • 12.1 and later Log only