Alert

Alert setting is accessible under Settings > Alert

On the alert setting page, the user can configure how MetaDefender OT Security behaves when there is an alert triggered: make an on-screen alert and notify the operator by sending a Syslog message.

Make on-screen alert

Users can choose how alerts can be displayed:

• When "Make On-screen alert" is checked for criticality levels (Medium, High, Severe): The user will be navigated to the alert screen whenever an alert based on the specified criticality level is triggered. All alerts must be resolved before the user can leave the alert screen.
• When "Make On-screen alert" is unchecked for criticality levels (Medium, High, Severe): Alerts will only appear on the alert list pages with an Acknowledge button beside them, allowing the user to resolve them later.
• At criticality levels, If users check on “Provide a reason for acknowledgment”, users need to provide one when acknowledging an alert.

In addition, you can apply this configuration for all sensors belonging to this site by checking on “Overwrite for all sensors”

Note: Alert with Medium criticality level will not be shown on screen by default.

Send Syslog message

Enable Send Syslog message if users want MetaDefender OT Security to send users a Syslog message.

Fill in the Server Address, Port, and Transport to receive the syslog. Users can also choose the Facility of the syslog message.

MetaDefender OT Security complies with RFC 3164 and RFC 5424