Set up policy rules with alarms that notify you when the rules generate events.
From the Trellix ESM dashboard, click
.png "menu.png")
and select More Settings.On the system navigation tree toolbar, click
.png "GUID-D5AACD7D-9544-4011-8E37-D57FED1D7387-low.png")
.Select the type of rule in the Rule Types section.
Select one or more rules in the rules display area.
Click
.png "GUID-57D72470-7C7F-40EE-A2A7-4486F9FCF1BB-low.png")
to create alarm.