Home
Guardian
User Guide
Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
Alerts
Alerts
The Alerts page shows all the latest alerts in the system. It lets you view the alerts in different modes, and carry out actions on the alerts.
Edit a playbook associated with an alert
A playbook associated with an alert can be modified. A change you make on the playbook only affects the playbook related to that specific alert.

Guardian
- Introduction
  An overview of Guardian.
- Installation Guide
  Information and resources on how to install Guardian, and the different options and settings that are available.
- Administrator Guide
  Information and resources about the Administration section of Guardian, and the tasks that you can do in this part of the software.
- User Guide
  Information and resources about the main features of Guardian, and the tasks that you can do from the user interface (UI).
  - Sensors
  - Alerts
    - Alerts
      The Alerts page shows all the latest alerts in the system. It lets you view the alerts in different modes, and carry out actions on the alerts.
      - Standard mode
        You can view alerts in standard mode to give you an overview of the latest anomalies.
      - Expert mode
        You can view alerts in expert mode to give you a detailed view of the alerts in the system. This lets you filter, sort, and analyze the information in detail.
      - View alerts in standard mode
        You can view alerts in standard mode to give you an overview of the latest anomalies.
      - View alerts in expert mode
        You can view alerts in expert mode to give you a detailed view of the alerts in the system. This lets you filter, sort, and analyze the information in detail.
      - Closing alerts
        When you close an alert, or incident, a dialog lets you select a reason, and specify the learning process.
      - Actions menu
        The Actions menu gives you access to all the actions that you can do for the related alert.
      - Edit a playbook associated with an alert
        A playbook associated with an alert can be modified. A change you make on the playbook only affects the playbook related to that specific alert.
  - Assets
  - Queries
  - Smart Polling
  - Arc
  - Network
  - Process
  - Reports
  - Assertions
  - Time machine
  - Vulnerabilities
  - Administration
  - Personal settings
- Maintenance Guide
  Information about the maintenance tasks of Guardian, to help you administer and maintain the solution in a production environment.
- Print format documentation
  A list of all the print-format documentation that is available for Guardian.

Edit a playbook associated with an alert

A playbook associated with an alert can be modified. A change you make on the playbook only affects the playbook related to that specific alert.

You can edit a playbook associated with an alert from the Playbook tab in the Alerts page.

In the top navigation bar, select Alerts.
The Alerts page opens.
Find the alert on which to edit the assigned playbook.
Select the alert, then select Playbook at the bottom of the screen.
To edit the playbook, select Edit.

Figure 1. Playbook tab
Edit the playbook as necessary.
Select Save.

Note: The playbook template from which the alert playbook was generated remains unchanged, as do all other alert playbooks generated from the same playbook template.