Protect Alerts
Overview
HYAS Protect aggregates all the Watch Engine, Highly Suspicious, and Blocked DNS traffic on the Protect Alerts page. This allows users to easily filter, sort, and configure Alerts to be emailed to specific users.
Alert View
When navigating to the Alerts page, you’ll be presented with a list of the latest 50 alerts in chronological order.
Additionally, you’ll find Timestamp, First Seen, Last Seen, Status, FQDN, Domain Age, Reasons, and Actions regarding the domain.
Deleting Alerts
If you wish to delete an alert, you may do so by checking the box next to the alert(s) and then clicking the trash can icon near the top left.
Acknowledging Alerts
In some cases, it may be useful to acknowledge an alert rather than delete it. In this scenario, the alert remains in the UI, (as opposed to when deleting it) with a green check mark next to it. There are two ways to acknowledge an alert.
Click on the empty space in between the check box and the timestamp. A green check mark will appear in that space once clicked.
Select the check box for the alert(s) you wish to acknowledge and then click the check mark next to the trash can in the upper left corner.
Refreshing Alerts
While on the Protect Alerts page, alerts won’t automatically update. You must navigate away from the page and then back to it or hit the refresh button.
Downloading Alerts
By selecting the alert(s) you wish to download and clicking the download icon, you may download the alerts in either CSV or JSON format.
Notification Settings
If you’d like specific users to receive email notifications when an domain or FQDN has been blocked, click on the Notification Settings icon and enter the users email address.
Please note that configuring email alerts for blocked domains or FQDN’s may cause a large volume of emails. Creating an email filter and folder to manage these may be necessary. The email will come from "support@hyas.com" with the subject: "HYAS Protect Alert"
Filtering Alerts
Analyzing alerts on the Protect Alerts page is made simple by utilizing the built in filters. You can filter by Acknowledged Status (New/Acknowledged), Time Stamp, First Seen, Last Seen, Status, FQDN and Domain Age. As you begin filtering the data, you can refine your results by adding additional filters.
Searching Notifications
To search for a notification, first select the list you wish to search.
Now, enter the relevant information in the Search Data Table Field on the right of the screen.
