To view, enable, or disable Indicator Sets, perform the following procedure.

Initially, all Indicator Sets are disabled. You can enable and disable these rule groups. For example, if one Indicator Set is generating too many uninteresting events in your environment, you can disable it on the Indicator Sets page. You can also create exceptions to an Indicator Set without disabling all indicators in the set. See Indicator Set Exceptions.

You can use the Group By menu, the Show Filters link, and the Show Columns link to modify your view of the Indicator Sets table. See Indicator Set Details for a description of all available columns.

Procedure

  1. On the console menu, click Rules and then click Indicator Sets.
    The Indicator Sets page
  2. Select the check box next to the name of each Indicator Set to enable and click Enable Indicator Sets.

    - or -

    Select the check box next to the name of each Indicator Set to disable and click Disable Indicator Sets.

  3. To see details and exceptions for an Indicator Set, click the View Details button next to its name in the table.