📄️ Report Rules
Lacework combines channels and report rules to provide a flexible method for routing reports. For channels (outgoing integrations), you define email information about where to send reports. For report rules, you define information about which reports to send. This two-part method provides the flexibility to define multiple channels and multiple rules and then have each rule sent to the email channels you specify.
📄️ Alerts versus Reports
Alerts and reports contain the same information about issues detected by Lacework. Alerts are typically meant to be consumed immediately after they occur so you can take appropriate action. Alerts can be delivered through all channel types. Reports are typically meant to be generated and delivered once per day for a predefined information set, such as SOC 2 or NIST. You can run reports on-demand as well. Reports can be delivered through email channels only.