Perform Other Smart Rule Actions

Clone a Smart Rule

You can clone custom or predefined Smart Rules.

  1. From the left menu in the BeyondInsight console, click Smart Rules.
  1. Select the Smart Rule you wish to clone, click the More Options button, and then select Clone.
  2. If you are using the multi-tenant feature, select the organization from the list, and then click Clone Smart Rule.
  3. On the Smart Rules page, select the newly cloned Smart Rule, click More Options > View Details, and then edit the Smart Rule filters as needed.
  4. Click Save Changes.

Deactivate a Smart Rule

You cannot delete predefined Smart Rules. However, if you have several smart groups, you can mark unused Smart Rules as inactive.

A Smart Rule that is used in another Smart Rule cannot be deleted or marked as inactive.

An inactive smart group is no longer displayed in the smart group browser pane until marked active again.

To deactivate a Smart Rule:

  1. From the left menu in the BeyondInsight console, click Smart Rules.
  1. Select the smart group or multiple smart groups, and then click Deactivate above the grid.

Delete a Smart Rule

  1. From the left menu in the BeyondInsight console, click Smart Rules.
  1. Select the Smart Rule.
  2. Click the Delete icon above the grid.

A Smart Rule that is used in another Smart Rule cannot be deleted or marked as inactive.

Smart Rule Options

Smart Rules Omni Worker Options

The Smart Rule Omni Worker Options allow you to configure multi-worker node usage, the number of Smart Rule threads per type, and the failure thresholds.

Multi-Node Processing: Off by default. Enable this to be able to assign Smart Rules to process on specific worker nodes. Choosing a worker node for a Smart Rule to process on is done by setting the Target Processing to Workgroup action on the Smart Rule in question. When enabled, this allows multiple omni workers to process Smart Rules.

 

For the following options to be available you must enable Multi-Node Processing.

  • Asset Threads: (Default 5) Choose a number of threads to use for processing asset based Smart Rules.
  • Managed Account Threads: (Default 5) Choose a number of threads to use for processing managed account based Smart Rules.
  • Managed System Threads: (Default 5) Choose a number of threads to use for processing managed system based Smart Rules.
  • Policy User Threads: (Default 5) Choose a number of threads to use for processing policy based Smart Rules.
  • Vulnerability Threads: (Default 5) Choose a number of threads to use for processing vulnerability based Smart Rules.
  • Force Re-queued if stale: (Default 12) Choose a number of hours after which an unprocessed Smart Rule is considered stale and re-queued for processing.
  • Failure cool off threshold: (Default 5) Choose a number of times to let a Smart Rule process fail after which a cool-off period is observed.
  • Failure cool off skip time: (Default 60) Choose a number of minutes to wait before trying to process the Smart Rule again after reaching the failure cool off threshold.

Click Update Smart Rule Omni Worker Options when you have finished setting the options.

 

View and Select Smart Rules Processing Statistics

The Smart Rules grid displays some processing statistics by default. Additional Smart Rules processing statistics, such as Processed Date, Successful Attempts, and Failed Attempts are available and can be displayed in the Smart Rules grid.

Column chooser options. Click the column name to add it to the grid. Check marks indicate displayed columns.

To add this information to the grid:

  1. From the left menu in the BeyondInsight console, click Smart Rules.
  1. Click the Column chooser icon in the upper right of the grid.
  2. Click the desired column to add that information to the grid.
    • Check marks indicate columns currently displayed.
    • You can remove a displayed column by clicking the column name in the Column chooser list.
    • If there are more columns displayed than can fit in the width of the screen, a scroll bar appears at the bottom of the grid. It may be necessary to scroll sideways to view any additional columns.