Enterprise Recon 2.7.0

Notification Policy

Set up event notifications for system events by going to Settings > Notifications > Notification Policy.

This section covers the following topics:

Set up Notifications and Alerts

Notification policies that are created in the Settings > Notifications > Notification Policy page are global notifications and alerts that apply to all Targets, scans, users, and more.

To set up a global notification policy:

  1. Log in to the ER2 Web Console.
  2. Go to Settings > Notifications > Notification Policy.
  3. On the top-right of the page, click + Create a Notification.
    Notification Policy page to filter, create and delete notifications and alerts for events in Enterprise Recon 2.2.
  4. In Notification Label, enter a label for this set of notifications.
    Configure alert and email notifications for specific Targets, users or events in the Create a Notification page.
  5. In Location, select the targets you want to set up notifications for.

  6. In the Who To Notify section, select users to send notifications to:
    1. User: Send an alert or email to selected users.
    2. Role: Send an alert or email to all users belonging to selected roles. See User Roles.
    3. Email Address: Send an email to a specific email address.
  7. In the Notification Options section, select the type of notification a user receives:
    1. Alert
    2. Email

Notifications

Notifications can be sent to users as:

Alerts

Alerts sent to users are displayed under the notifications icon .

Expanded notifications icon displaying "Remediation Failed", "Search Detected Matches" and "Search Failed" alerts..

Users can view a summary of alerts sent to them on the My Notifications page. To view a summary of alerts:

  1. Click the notifications icon .
  2. Click See all notifications.

Or:

  1. Go to [Username] > My Account.
  2. Click See My Notifications.
    See My Notifications button to view user notifications. .

Emails

Selecting Email under Notification Options has ER2 send email notifications to specified email addresses. The email address does not have to be registered to a user in ER2.

A Message Transfer Agent (MTA) must be set up for email notifications to work. See Mail Settings.

Email notification annotating search detected matches on Target "MY-UBUNTU-MACHINE".

Events

You can configure ER2 to send a global notification or an email alert for the following events:

Event Global Admin Non-Global Admin
Access Control Completed  
Access Control Failed  
Agent Error  
Backup Failed  
Backup Succeeded  
Credential Changed  
Datastore Failure  
Login Failed  
Login Successful  
No Matches Found  
Process Failed  
Remediation Cancelled  
Remediation Completed  
Remediation Failed  
Processing Blocked  
Role Changed  
Scan Running
Search Detected Matches
Search Failed
Search Paused
Search Resumed
Search Stalled
Search Started
Target Not Scanned
User Account Changed