Update what action to take when an evaluation attack group's rule triggers. Use
alert to record the trigger of the event,
deny to block the request, or
none to take no action. Currently the only member in the attack group object is
action. Products: All.