2017-12-11 03:46 AM
Hi,
I am new to RSA SA.. I have a plenty of alerts which is every time configured to email notification. I wanted to use one single email notification subject which should get the alert name or module_name from the trigerred alert as an subject line while sending the email notificattion?
Appreciate for any prompt response.
Thank you.
2018-01-11 04:34 AM
Hi Mohamed,
For ESA notification, below will be the subject.
RSA ESA Alert Notifications - ${moduleName}
For Health & Wellness notification, below will be the subject.
SA Health <#if state == "ACTIVE">${severity?lower_case?cap_first} Severity<#else>${state?lower_case?cap_first}</#if> Alarm: ${ruleName!"Unknown Rule Name"} on ${hostName!"Unknown Host Name"}
Reference: https://community.rsa.com/docs/DOC-74589