Request a new alert configuration rule

If you are a primary or secondary contact in your organization, there are some alert configuration rules that you can manage directly in the Arctic Wolf® Unified Portal. For more information, see Manage alert configurations.

Otherwise, complete these steps to request a new alert configuration rule.

These resources are required:
  • Administrator permissions for the Arctic Wolf Unified Portal.

    You must be a primary or secondary contact. If you require this level of access, submit your request to a primary or secondary contact in your organization, or click Request an Update. For more information, see Request an alert configuration rule update.

  1. Sign in to the Arctic Wolf Unified Portal.
  2. In the navigation menu, click Organization Profile > Alert Configuration Rules.
  3. Click Request New Configuration.
  4. In the Request Subject field, briefly describe the alert you want to change.
  5. Optional: Add a related ticket.
  6. In the Request Details field, enter a detailed description of your alert configuration rule update request. If applicable, include information about the relevant application, server, host device, username, and network or system event. If applicable, specify the dates and times when this rule should be active.
    For example:
    • Allow cloud service sign-in from Canada.
    • Do not alert if user jane.doe@example.com assigns administrator permissions to another user in Office 365.
    • Do not alert if user john.doe@example.com signs in to a cloud service from New Zealand between August 10, 2023 and October 30, 2023.
  7. Optional: Attach a file.
  8. Click Submit Request.