Prisma Cloud Compute: Why are the Runtime Incidents not showing in Workload Incidents even after enabling Policy in CSPM?

Prisma Cloud Compute: Why are the Runtime Incidents not showing in Workload Incidents even after enabling Policy in CSPM?

2933
Created On 07/17/23 23:01 PM - Last Modified 10/09/24 21:41 PM


Question


Why are the Runtime Incidents not showing in Workload Incidents even after enabling Policy in CSPM?

Environment


  • Prisma Cloud Saas version


Answer


Create a resource list and assign the cluster name or host name in the resource list. Follow the following steps to complete the resource list,
  • Go to Settings > Resource list > Add a resource list where specify your cluster and namespaces and set everything on wild-card (*)
  • Now go Alerts > Alerts Rule > Create a new Alert Rule now > Inside the Assign Target select the newly created resource list
  • Inside the Alert Rule, now select a Policy "Container workloads detected with Runtime Incidents" and save this rule
  • By following these above steps you will be all set to see incidents under Alert Overview Screen


Additional Information


Please review this document here for more information on resource list.

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kIIzCAM&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language