System notification

The Systems Notification dashboard item displays event notifications that are received by your system.

For notifications to show in the System Notification dashboard item, the Administrator must create a rule that is based on each notification message type and select the Notify check box in the Custom Rules Wizard.

For more information about how to configure event notifications and create event rules, see the IBM® QRadar Administration Guide.

On the System Notifications dashboard item, you can view the following information:
  • Flag - Displays a symbol to indicate severity level of the notification. Point to the symbol to view more detail about the severity level.
    • Health icon
    • Information icon (?)
    • Error icon (X)
    • Warning icon (!)
  • Created - Displays the amount of time elapsed since the notification was created.
  • Description - Displays information about the notification.
  • Dismiss icon (x) - Will allow you to close a system notification.
You can point your mouse over a notification to view more details:
  • Host IP - Displays the host IP address of the host that originated the notification.
  • Severity - Displays the severity level of the incident that created this notification.
  • Low Level Category - Displays the low-level category that is associated with the incident that generated this notification. For example: Service Disruption.
  • Payload - Displays the payload content that is associated with the incident that generated this notification.
  • Created - Displays the amount of time elapsed since the notification was created.

When you add the System Notifications dashboard item, system notifications can also display as pop-up notifications in the QRadar® user interface. These pop-up notifications are displayed in the lower right corner of the user interface, regardless of the selected tab.

Pop-up notifications are only available for users with administrative permissions and are enabled by default. To disable pop-up notifications, select User Preferences and clear the Enable Pop-up Notifications check box.

In the System Notifications pop-up window, the number of notifications in the queue is highlighted. For example, if (1 - 12) is displayed in the header, the current notification is 1 of 12 notifications to be displayed.

The system notification pop-up window provides the following options:
  • Next icon (>) - Displays the next notification message. For example, if the current notification message is 3 of 6, click the icon to view 4 of 6.
  • Close icon (X) - Closes this notification pop-up window.
  • (details) - Displays more information about this system notification.