Rule Actions

Rule actions are automatic procedures that occur when all rule Conditions and threshold settings have been met. (See also Rules.) You can choose to be notified of a triggered rule at the ArcSight Console or through the Notifier (see Notifications), have information about the Events that triggered the rule sent to a case or active list (see Cases or Active Lists), or automatically execute a command line function. You can also assign more than one rule action to any rule.

The task steps for these activities are available in Managing Rule Actions.