Role Availability | ✔️ Read-Only ✔️ Investigator ✔️ Analyst ✔️ ManagerIn USM Anywhere, all alarms have a Priority field, which indicates the importance of the alarm. This is a measurement to determine the impact of the alarm in the network.The priority field can display Low, Medium, High, or Critical. This text comes from and orchestration rules. When you create an orchestration rule, you must enter a priority value between 0 and 100. LevelBlue Labs™ creates the and include a value. The LevelBlue Labs team sets the value for the correlation rules based on the alarm’s criticality.The displayed text in the column of alarms depends on the value that the rule has according to this table:Priority Field for Alarms
Displayed text
Priority Score
Low
Between 0 and 33
Medium
Between 34 and 66
High
Between 67 and 90
Critical
Between 91 and 100
When triggered, critical alarms are triaged and addressed immediately. If you have orchestration rules configured to trigger on alarms with a priority of High, enabling the Critical toggle will prevent those rules from triggering for alarms that are now set to Critical. To ensure proper functionality, you need to update the orchestration rules to include both High and Critical priorities.
Open the details of an alarm to learn the exact value of the priority level. See Viewing Alarm Details for more information. After you are in the Alarm Details page, hover over the priority text and a dialog box will show you the exact value.
