> ## Documentation Index
> Fetch the complete documentation index at: https://levelblue-final.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Priority Field for Alarms

&#x20;Role Availability | ✔️ Read-Only ✔️ Investigator ✔️ Analyst ✔️ Manager

In USM Anywhere, all alarms have a Priority field, which indicates the importance of the alarm. This is a measurement to determine the impact of the alarm in the network.

The priority field can display Low, Medium, or High. This text comes from correlation (Correlation identifies potential security threats by identifying relationships between multiple types of events occurring in two or more assets.) and orchestration rules. When you create an orchestration rule, you must enter a priority value between 0 and 100. LevelBlue Labs™ creates the correlation rules (A correlation rule correlates incoming events based on previously defined relationships defined in the correlation directive, associating multiple events, of the same or different event types, from the same data source.) and include a value. The LevelBlue Labs team sets the value for the correlation rules depending on how critical the alarm is.

The displayed text in the column of alarms depends on the value that the rule has according to this table:

**Priority Field for Alarms**

| Displayed text | Value in the rule |
| - | - |
| Low | Between 0 and 33 |
| Medium | Between 34 and 66 |
| High | Between 67 and 100 |

Open the details of an alarm to learn the exact value of the priority level. See [Viewing Alarm Details](https://cybersecurity.att.com/documentation/usm-anywhere/user-guide/alarms/viewing-alarms-details.htm) for more information. After you are in the Alarm Details page, hover over the priority text and a dialog box will show you the exact value.

![](https://mintcdn.com/levelblue-final/SPmy2LqqTlJThUf-/images/usm-anywhere/priorityvalue_350x293.webp?fit=max\&auto=format\&n=SPmy2LqqTlJThUf-\&q=85\&s=e4247da6739064a0aa8a1885aa37ba3a)

See [Correlation Rules](https://cybersecurity.att.com/documentation/usm-anywhere/user-guide/rules-management/correlation-rules.htm) and [Orchestration Rules](https://cybersecurity.att.com/documentation/usm-anywhere/user-guide/rules-management/orchestration-rules.htm) for more information.
