diff --git a/source/app/blueprints/alerts/templates/alerts.html b/source/app/blueprints/alerts/templates/alerts.html index c49a32068..b2532cf7c 100644 --- a/source/app/blueprints/alerts/templates/alerts.html +++ b/source/app/blueprints/alerts/templates/alerts.html @@ -179,22 +179,50 @@ -
-
- -
+
+
+ +
+
-
-
-
- -
-
+
+
+
+ +
+
+ +
+
+

Here are two sample custom conditions:

+

+[{
+  "field": "alert_severity_id",
+  "operator": "in",
+  "value": [1, 2]
+},
+{
+  "field": "alert_title",
+  "operator": "like",
+  "value": "phishing"
+}]
+

+[{
+  "field": "severity.severity_name",
+  "operator": "like",
+  "value": "Critical"
+}]
+
+

Copy one of these conditions and paste it into the "Custom Conditions" field above, then adjust the values as needed.

+
+
diff --git a/source/app/static/assets/js/iris/alerts.js b/source/app/static/assets/js/iris/alerts.js index 104f58d5e..4ae5bb92e 100644 --- a/source/app/static/assets/js/iris/alerts.js +++ b/source/app/static/assets/js/iris/alerts.js @@ -1358,7 +1358,7 @@ async function updateAlerts(page, per_page, filters = {}, paging=false){ console.error(error); }); - if (!notify_auto_api(data)) { + if (!notify_auto_api(data, true)) { return; } const alerts = data.data.alerts;