DocsActions

Actions

Everything Frabs can do about an incident.

Action	What it does	Runs in
Rate Limit	Caps the VM's outbound traffic	Sensor
Connection Limit	Caps new connections per second	Sensor
Block Destination	Stops traffic to one address	Sensor
Block Port	Stops outbound traffic on one port	Sensor
Isolate VM	Cuts the VM off until you release it	Sensor
Restore VM	Lifts every Frabs action on the VM	Sensor
Open Ticket	Tells the customer, with the evidence	Billing or help desk
Add Note	Records the incident on their account	Billing
Suspend / Unsuspend	In your billing system	Billing
Webhook	Hands the incident to your own tools	Webhook

By hand

On an incident, choose Take Action. Suspending needs the Can Suspend VMs permission.