Editing and deleting your alert definitions

Alert definitions that you have created can be edited and removed. You can maintain alert defintions to ensure that the information remains relevant to your investigations.

About this task

After you have created an alert definition, you have permission to modify or remove that definition in the following ways:

Add or remove subscribers - You can modify the users that are alerted
Modify the expiry date - You can change the length of time that alerts are generated for
Change the actions that are being monitored
Delete the alert definition

Note:

You cannot add or remove records from an alert definition or change the query saved as part of the alert definition. If you would like to change these options, create a new alert definition.
Alert definitions are automatically deleted if a change to the entity and link types in the database makes the alert definition invalid. As the owner of the alert definition, you will receive an alert informing you of the deletion.

Procedure

In the Alerting dialog, select Alert Definitions to list the alert definitions that you own.
Click Edit to open the Alert Definition in an editable form.

Note: Alternatively, click Delete to remove the alert definition entirely and prevent any further alerts from being generated.
Make your changes:
- To modify the subscribed users, click Select Users and add or remove the users.
- Use the Duration options to change the duration that the alert definition is active.
- Modify the alert definition. For more information on the available options, see:
  - Adding alert definitions on records
  - Adding alert definitions on queries
Save your changes.