To configure a response rule:
--host
— address of the KSMG server.--username
— name of the user account created in KSMG.You can specify the Administrator account.
--password
— KSMG user account password.--rule_id
— ID of the rule created in KSMG.--email
— specify the field of the KUMA event from which you want to obtain the URL, for example, {{.SourceUserName}}
.--ip
— specify the field of the KUMA event from which you want to obtain the IP address, for example, {{.SourceAddress}}
.--ntlm
— specify this option if the KSMG user was created with NTLM authentication.Example:
|
The response rule is linked to the correlator and ready to use.
Page top