If a Prisma Cloud alert is configured to auto-remediate, will I still get notifications?

If a Prisma Cloud alert is configured to auto-remediate, will I still get notifications?

7201
Created On 02/28/19 20:59 PM - Last Modified 01/26/22 03:34 AM


Question


If I configure Alert Rules to both auto-remediate and also generate notifications, will I still get notifications when an alert is created?

Environment


  • Prisma Cloud API.
  • Alerts.

Answer


  1. No. Auto-remediated alerts will start with the "Resolved" status. 
  2. Only "Open" alerts will generate notifications, In this case, no notifications will be sent out. 
  3. This is true even if you have multiple Alert Rules configured. 
Example, Alert Rule A is configured to auto-remediate Policy A, and Alert Rule B is configured to generate e-mail notifications for Policy A, then whenever a new Policy A alert is generated, it will be auto-remediated, but no e-mails will be sent.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boEXCAY&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language