Create security tag rules

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 13일
  • 소요 시간: 2분

    • Security tag rules automatically apply tags to security incidents when specified conditions are met to provide security incident filtering for security analysts.

    시작하기 전에

    • Security tags added by rules are removed automatically when rule conditions no longer match.
    • Manual security tags are preserved when automatic tags are applied.
    • When multi-selection is disabled for a security tag group, only one tag from that group can be applied to a security incident. If a security analyst manually applies a tag and an automatic tagging rule subsequently triggers for a different tag within the same group, the automatic tag overrides the manual tag.
    • Role required: sn_si.admin

    프로시저

    1. Navigate to All > Security Operations > Security Tags > Tags.
    2. Choose or create a security tag.
    3. In the Security Tag Rules related tab, select New.
    4. Fill in the fields on the form, as appropriate.
      Field Description
      Name The name of the security tag rule.
      Security Tag The security tag to attach to the rule.
      Active Option to turn the security tag on or off.
      Description A description of this rule.
    5. Determine Record Filtering.
    6. Fill in the fields on the form, as appropriate.
      Field Description
      Use filter group Option to associate the filter group to the rule.
      Table The table to contain the rule.
      Condition Option to add one or more filter conditions.
    7. Select Submit