Viewing Rules

Use the Rules Manager page in the Findings Center to view all rules defined in the Axonius Findings Center.

To view the Findings rules

1. In the left navigation panel, click the Findings icon .
2. Click the Rules Manager tab. The Rules Manager page opens.

Rules Manager Table

The Rules Manager table lists all Findings Rules defined in Axonius, sorted by the date that the rule triggered an alert, from the most recent to the earliest.

The Rules Manager table provides the following information:

Changing the Order Columns are Displayed

You can change the order of columns displayed in the table.
Drag and drop columns on the table to arrange them in the order that you want. The changes are only for the current session.

Searching and Filtering Rules

You can filter the rules that are displayed.

The following filters are available:

• Search Findings - Search for any text in a rule.

• Severity - Display rules of specific severities. From the dropdown, select one or more of the following: Informational, Low, Medium, High, Critical

• Check and Notify - Display rules of a specific run schedule. From the dropdown, select one or more of the following: Every global discovery cycle, Every x hours, Every x days, Days of week, Days of month

• Entity Type - Display rules on one or more entities (i.e., asset types).

  • From the Entity Type dropdown, select one or more entities (i.e., asset types) to return the Rules that apply to these asset types. For example: Users, Application Settings, Devices, Tickets. The assets in the dropdown are listed according to asset category (as on the Assets page). In addition, it is possible to type and search to easily locate in the dropdown, the asset type required.
    

• Trigger Condition - Display rules with triggers of one or more condition types: Simple query threshold, Query comparison, Query change over time

• Mute Conditions - Display rules with one or more of the following mute types: Off (no muting), Mute time after first alert, Mute on specific dates, Mute daily in this time range

Total Results

The total number of Rules found for the search criteria is displayed on the top left side of the Rules table just under the Filter bar. If no filter criteria are selected, Total represents the total number of Rules that are defined in the system.

Resetting Filters and Searches

You can clear a specific filter or reset all filters.

• Click Clear All to clear all selections in a specific filter.
• Click Reset from the top right of the Rules Manager page to clear all filters, and display all the rules.

Sorting

You can sort the Rules Manager table by any column.

To sort the table

1. Hover over a column header. A small arrow appears. The up arrow indicates that the column is sorted from low to high. The down arrow indicates sorting from high to low. Sorting columns alphabetically is case insensitive.
2. Click the small arrow to set the sort order.

Rule Retention

The Rule Manager pages always display the last 100,000 rules.