> ## Documentation Index
> Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Creating Rules from Alarms

<Icon icon="users" iconType="solid" /> Role Availability | ❌ Read-Only ❌ Investigator ✔️ Analyst ✔️ Manager

USM Anywhere enables you to create and manage your own orchestration rules from the <Tooltip tip="Alarms provide notification of an event or sequence of events that require attention or investigation.">Alarm</Tooltip> Details Page, which is the easiest way to configure an orchestration rule.

<Danger>
  Orchestration rules only apply to future events and alarms.

  Suppression rules using the Contains, Match and Match, case insensitive operators apply to future events and alarms, not to events and alarms received in the current day.
</Danger>

You can create these rules:

* **Suppression rule**: You can create a rule to suppress <Tooltip tip="Alarms provide notification of an event or sequence of events that require attention or investigation.">alarm</Tooltip> that match a particular set of criteria. See [Creating Suppression Rules from the Alarms Page](/documentation/usm-anywhere/user-guide/alarms/suppression-rule) and [Suppression Rules from the Orchestration Rules Page](/documentation/usm-anywhere/user-guide/rules-management/suppression-rules) for more information.
* **Notification rule**: You can create a <Tooltip tip="Communication of an important event, typically through an email message or other desktop display. In USM Appliance, notifications are typically triggered by events, policies, and correlation directives, and in USM Anywhere, they are typically triggered by notification rules or directly from alarms.">notification</Tooltip>
  rule according to a method. See [Creating Notification Rules from the Alarms Page](/documentation/usm-anywhere/user-guide/alarms/notification-rule) and [Notification Rules from the Orchestration Rules Page](/documentation/usm-anywhere/user-guide/rules-management/notification-rules).
