Anomaly Triggers Tool

The Anomaly Triggers utility checks the event data for each event in the Event Listing grid against pre-configured Anomaly Triggers. The Anomaly Triggers tool will automatically create findings on those events where the event data exceeds specified criteria. Where findings exist and event data no longer exceeds the criteria, then findings will be deleted.

Caution

In most cases, Findings are generated at the time events are added or imported. There are however some scenarios in which the Anomaly Triggers utility should be run manually, these are 1) whenever anomaly triggers are edited; 2) before any Finding review sessions; or 3) after a bulk import of event data (particularly when anomaly triggers rely on events other than itself).

Anomaly Triggers can be configured on fields in Asset Information and Event Types