Editing MARs rule groups

[sticano]

I would like to edit MARS groups all at once so that I can send email alerts. For instance: I would like all the rules in Info/HighUsage/NetworkDevice to send me an email alert. It appears to me that I can only edit these rules once they happen...I hope I am completely wrong on this. Any ideas?

[mhellman]

You have to individually modify the "action" for each inspection rule. I don't think "Info/HighUsage/NetworkDevice" is a rule group, it is an event type group. You could create a custom inspection rule that looks for this event type with an action that sends an email. I'm not sure why you'd want to do that, but you could.