Oracle Cloud Infrastructure Documentation

Editing Rule Settings in an OCI Responder Recipe

You can modify different sets of rule settings in Oracle-managed and user-managed recipes in Cloud Guard

From the recipe level, the only change that you can make in responder rule settings is to enable and disable rules in user-managed (cloned) responder recipes. You can't change any rule settings for an Oracle-managed responder recipe from the recipe level.

For complete information about what you can modify in Oracle-managed and user-managed (cloned) responder recipes, from the recipe or target level, see Modifying Recipes at Recipe and Target Levels.

    1. Navigate to the details page for the user-managed (cloned) responder recipe for which you want to modify rule settings.
      For navigation steps, see Editing a User-Managed OCI Responder Recipe.
    2. Locate a rule that you want to modify, open its Actions menu Image of Action menu, and select Edit.
    3. If the recipe is user-managed, change Status to Enabled or Disabled.
    4. If the responder rule Type is REMEDIATION, and the Required policy statements list, has any statements with "Not Added" showing on the right, click Add statements.
      Note

      These policy statements must be added to allow the detector rule to operate.
    5. Click Save.

  • For a complete list of flags and variable options for CLI commands, see the Command Line Reference.

    Use the oci cloud-guard responder-recipe-responder-rule update command and required parameters to update a rule in a responder recipe:

    oci cloud-guard responder-recipe-responder-rule update --details <valid_json> --responder-recipe-id <responder_recipe_ocid> --responder-rule-id <responder_rule_id> [OPTIONS]

  • Use the UpdateResponderRecipeResponderRule operation to update a responder rule in a responder recipe.