TABLE OF CONTENTS
Alerts Overview
In Aqua Wave alerts are notifications of certain activities (A scan is run or an event is received) in the users account . The alerts service then send these notifications to the Integrations that are configured (an Integration must be created before an alert can be configured). There are two types of Alerts: Scan Alerts and Event Alerts.
Scan Alerts
Scan alerts are notifications that get sent after a scan is completed. These alerts can be configured to only send notifications when a certain plugin enters a fail or warning state and will contain the plugin, resource and severity.
Scan alerts can also be configured to send notifications whenever a scheduled scan is run. These alerts will contain the number of passing, failing and warning results as well as any new failing plugins. Click here for instructions on how to create a new scan alert
Event Alerts
Event alerts are notifications that get sent after an event is received and processed by the Aqua Wave CSPM Event Service. These alerts can be configured to only send notifications when specific actions are received by the event service. These alerts will contain the action that was flagged, the invoking user, the IP Address of the invoking user, a description of why the action was flagged and the raw data of the event that Aqua Wave received. Click here for instructions on how to create a new event alert