To collect events from Onapsis Security Platform, you must add a connector and an alarm
profile.
About this task
Alarm profiles configure the Onapsis Security Platform to automatically take action when an
incident is observed.
Procedure
-
Log in to Onapsis Security Platform.
-
Click the Gear icon.
-
Click Settings.
-
From Connectors Settings, click Add to include a
new connector.
-
Click .
-
Add new alarm profile.
-
Select Alarm Type and Severity.
-
Type the name and the description.
-
Select the target from the Assets List or Tags
List.
The lists are mutually exclusive.
-
Add a condition for when the alarm is triggered
-
To add an action that runs when the alarm is triggered, click
Action.
-
Select the QRadar®
connector that was created in step 4.