After you add your website to Web Application Firewall (WAF), you can configure alerts to receive notifications when WAF detects an attack event or abnormal traffic. This helps you stay informed about your business's security status.
Prerequisites
You have added a domain name to WAF for protection. For more information, see Onboarding overview.
Optional: You have enabled Log Service for WAF and log collection for the protected domain name. For more information, see Step 3.
This is required if you want to configure alerts by using Log Service.
Procedure
-
Log on to the Web Application Firewall 3.0 console. From the top menu bar, select the resource group and region (Chinese Mainland or Outside Chinese Mainland) for the WAF instance.
-
In the navigation pane on the left, choose .
On the Alert Settings page, select a notification method based on the event type.
Notification method
Description
CloudMonitor Notifications
Uses the alerting feature of CloudMonitor to create WAF alert rules.
CloudMonitor is a service that monitors Alibaba Cloud resources and internet applications. The CloudMonitor alerting feature supports monitoring of events and business metrics for cloud services.
Click CloudMonitor Notifications to go to the alert rule configuration page in the CloudMonitor console, where you can configure alert rules. For more information, see Configure CloudMonitor notifications.
Log Service Configuration
Uses the log alerting feature of Log Service for WAF to create alert rules.
Log Service for WAF helps you collect and store request logs for protected domain names. You can then query and analyze these logs. Based on the query and analysis results, you can create custom alert rules for the metrics that you want to monitor.
Log Service Configuration supports monitoring multiple combinations of business metrics. This method offers greater flexibility for customized alert scenarios but is also more complex to use.
Click Log Service Configuration to go to the Log Service for WAF page, where you can query and analyze WAF logs and configure custom alerts. For more information, see Customize WAF monitoring and alerting using Log Service.