How to enable the "File Activity Anomaly alert"?

Hi ​@Ken_H ,

Kindly share the service pack version installed on the Commserv. And refer below steps to enable alert on security posture.

https://documentation.commvault.com/2024/essential/enabling_alerts_for_security_iq_dashboard.html

 

1. From the navigation pane, go to Monitoring > Security IQ.

   The Security IQ dashboard page appears.

2. In the upper-right area of the page, click alert icon  , and then enable any of the following alerts:

   • Anomalous conditions: Notifies you of anomalous events that are indicated by a change in data or activity.

   • Security posture score: Notifies you of changes in the security posture score.

   • Unusual file activity: Notifies you of anomalous file system activity in the endpoint servers or file servers.

Hello ​@Pradeep,

I am running 2024E, 11.36.28 to be specific.

I tried to follow your recommended steps but they do not match what appears in Command Center. Going to Monitoring > Security IQ > Alert icon (in the upper right) simply shows No alerts available.

If I click on View All, I’m taken to the Monitoring > Alerts > Triggered alerts screen which shows No Data available. Again, I’m asking about the "File Activity Anomaly alert" as shown in the Security Assessment screen withing Command Center:

If I go into Monitoring > Alerts > Alert definitions, I see Anomalous condition alerting is already enabled.

Likewise, Security posture score is already enabled:

Finally, there is no entry for Unusual file activity so I’m not able to make any changes for that setting.

I don’t mean to sound ungrateful but what you’ve provided doesn’t help resolve my issue.

Ken