Managing Notification Groups

On the Console, a notification group is denoted as a destination. This means this group is the recipient of notifications.

Purpose: The ArcSight Console has default destination groups that you can use. A destination group is assigned to users to receive specific notifications.

Where used:

Caution: Do not exceed more than 10,000 resources in a group.

Where: Navigator > Resources > Notifications > Destinations > Shared > All Destinations

To create or edit destination groups:

Note: As a user, you can create new groups under All Destinations, but not new subgroups under existing system-defined groups.

  1. If you are creating a group, right-click All Destinations and select New Group.

    If you are editing a group, right-click the group and select Edit Group.

  2. Set the following attributes:

    Field Description

    Name

    Enter a name for the group.

    Caution: If you are renaming an existing group, check for the following:

    • If this group is assigned to a user, edit that user's Notification Groups attribute by selecting the renamed destination.

    • If a rule action to send notification is set to send to this group, edit that rule action by selecting the renamed destination.

    Reference Pages

    Enter text as required for the group or for members. Refer to Reference Pages for information.

  3. Entering data in the Common and Assign sections is optional, depending on how your environment is configured. For information about the Common and Assign attributes sections, as well as the read-only attribute fields in Parent Groups and Creation Information, see Common Resource Attribute Fields.

  4. Press Enter.

To rename destination groups:

Caution: If you are renaming an existing group, check for the following:

  • If this group is assigned to a user, edit that user's Notification Groups attribute by selecting the renamed destination.

  • If a rule action to send notification is set to send to this group, edit that rule action by selecting the renamed destination.

  1. In the Notifications resource tree, right-click a group and choose Rename.

  2. In the text field, rename the group.

  3. Press Enter.

To delete destination groups:

Caution: If you are deleting a destination group, check for the following:

  • If this group is assigned to a user, edit that user's Notification Groups attribute by selecting the another destination.
  • If a rule action to send notification is set to send to this group, edit that rule action by selecting another destination.
  1. In the Notifications resource tree, right-click a group and choose Delete Group.

  2. Click Yes.