cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Raj_Khatri
Copper

SmartEvent Alerting

I am trying to setup email alerts for threats as they are detected (Anti-virus, Anti-bot, etc.) and configured Automatic Reactions within SmartEvent R80.10.  While I am able to get email alerting working, the email content provides no value as there the Attack Details is empty and having UserID information would be useful.  Also, I don't see a way to create alerts according to various severity levels.

If anyone has any insight as to how best to configure/customize these alerts, it would be helpful.

0 Kudos
3 Replies
Admin
Admin

Re: SmartEvent Alerting

Have you applied this fix for the blank UserID?: In E-mail alerts sent by SmartEvent, the user name field contains '*** Confidential ***' i... 

Can you provide some examples of what kinds of alerts you would like to see based on what kind of severity?

0 Kudos
Raj_Khatri
Copper

Re: SmartEvent Alerting

Thanks for providing the SK to address the blank UserID.  With respect to an example, a simple alert such as any threat prevention blade (IPS, AV, AB) with Critical Severity should trigger an automatic reaction and include attack details.

0 Kudos
Admin
Admin

Re: SmartEvent Alerting

0 Kudos