Email notifications tab

The Email notification tab allows you to configure email notifications for appliances that you have installed. These email notifications can be configured with various options, such as the frequency of alerts, maximum number of alerts in a day, and the types of alerts that trigger the email. In addition to these settings, the syntax of the email subjects can be modified to your preference.

The quick search field above the list provides fast, as-you-type search. It filters the rows in the list, displaying only those rows that have text, in any field, that matches the query string.

Click the plus icon to add a notification.

The columns to be displayed in the list can be customized by clicking the additional content icon.

Customize the number of rows to be displayed. The default is 20 entries. Use the left arrow (back) and right arrow (forward) icons to navigate through multiple pages.

The Email notifications list contains the following:

Appliance

The appliance or sensor that triggers the notifications.

Click edit to edit the notification.

Click delete to delete the notification. Click the Delete button in the Delete confirmation pop-up.

Click unread to view a summary of the notification configuration. The summary is displayed in a pop-up. Click the Send test notification button to send a test. Click the Edit button to edit the notification configuration. Click cancel/close or the Close button to dismiss the pop-up.

Click heartbeat/test to send a test notification. The icon will be grayed out if the notification is disabled.

Daily maximum

The maximum number of notifications to send within a 24 hour period.

Subject template

Displays the subject template, default or modified.

Network template

Displays the network template, default or modified.

Appliance template

Displays the appliance template, default or modified.

Audit template

Displays the audit template, default or modified.

Recipients

The recipients of the email notifications.

Enabled

Shows True if the notification is enabled, False otherwise. Click power to toggle the enable/disable status of the notification.

Create email notification page

On the Create Email Notification page, fill in the following:

Appliance

The appliance or sensor that triggers the notifications. Select from the License pull-down menu:

  • All licenses — Automatically selects all sensors.

  • All sensors — Use the Sensor pull-down menu to select any specific sensor from any license.

  • Specific license — Use the Sensor pull-down menu to select All sensors for that license or any specific sensor.

Daily limit

Select the maximum number of notifications to send within a 24 hour period. 0 (zero) means unlimited.

Timezone

Select the timezone within which daily limits are computed. By default, the current system timezone is selected.

Enable/disable notification

Click the Enabled button to toggle whether the notification will be enabled upon being saved. Notifications can be enabled or disabled at any time.

Mail settings

Template Overrides

The overrides allow you to configure what the email subject will look like when the triggers send email.

The different overrides are broken down by trigger type and directly correspond to the associated trigger list below.

Recipients

The recipients of the email notifications. This can be either an individual user or a list of users. A valid email address must be specified for each recipient.

Triggers

Select the appropriate triggers for the notification. For more information, see About notification triggers. Also see Sensor group notifications for some caveats about notifications and sensor groups.

Appliance triggers

By default, Appliance triggers are set to Enabled.

Audit triggers

By default, Audit triggers are set to Disabled.

Network triggers

By default, Network triggers are set to Enabled.

Campaign triggers

By default, Campaign triggers are set to Disabled.

Mail triggers

By default, Mail triggers are set to Enabled.

Network IoC triggers

By default, Network IoC triggers are set to Enabled.

Intelligence triggers

By default, Intelligence triggers are set to Disabled. These triggers are only available when All licenses is selected.

Once the notification is properly configured, click the Save button to apply the changes. The Email notification configuration summary pop-up is displayed. When you close it, the Email notifications list is displayed.