Skip to content

Commit 58fa11e

Browse files
committed
edits1
1 parent 67e4c1a commit 58fa11e

File tree

1 file changed

+2
-2
lines changed
  • articles/defender-for-iot/organizations

1 file changed

+2
-2
lines changed

articles/defender-for-iot/organizations/alerts.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -54,9 +54,9 @@ Alert options also differ depending on your location and user role. For more inf
5454

5555
Alert fatigue caused by excessive number of identical alerts could lead to your team failing to see or remediate vital alerts. Aggregating alerts reduces the number of alerts reported by listing identical alert types with the same parameter settings as one alert. The matching parameters differ depending on the type of alert. For example, the alert *Unpermitted Usage of Modbus Function Code* needs to have the same source and destination IP addresses.
5656

57-
The aggregated alert includes alerts with different alert codes, such as read and write codes. You access this data in the **Violations** tab of the alert details where you download it as a CSV file that lists the relevant parameters and functions. You can then remediate the alert. Only alerts that have the same remediation process are grouped. Alerts can still be viewed individually within their respective devices.
57+
The aggregated alert could include alerts with different alert codes, such as read and write codes. You access this data in the **Violations** tab of the alert details where you download it as a CSV file that lists each alert with the relevant parameters and functions. This data can help teams to identify patterns, assess impacts and prioritize responses more effectively based on the remediation suggestions in the **Take action** tab. Only alerts that have the same remediation process are grouped. Alerts can still be viewed individually within their respective devices.
5858

59-
The alerts that can be grouped are listed in the [Alert reference](alert-engine-messages.md) tables under the **Grouped** heading.
59+
The alerts that can be aggregated are listed in the [Alert reference](alert-engine-messages.md) policy engine alerts tables under the **Aggregarted** heading.
6060

6161
Alert grouping appears in both the OT sensor console and the Azure portal. For more information, see [remediate aggregated alerts in Sensor console](how-to-view-alerts.md#remediate-aggregated-alerts) and [remediate aggregated alerts in Azure portal](how-to-manage-cloud-alerts.md#remediate-aggregated-alerts).
6262

0 commit comments

Comments
 (0)