Configure Global Notifications Templates

This topic provides instructions for adding, editing, duplicating, and deleting global notifications templates.

Note: New Health and Wellness supports only Email and Syslog notification outputs.

Note: ESA SNMP notifications are not supported for NetWitness 11.3 and later.

When upgrading from version 10.4, all existing notification templates migrate to the Event Stream Analysis template type.

Add a Template

You can use the default templates provided or you can configure your own templates. To configure your own template:

  1. Go to netwitness_adminicon_25x22.png (Admin) > System.
  2. In the options panel, select Global Notifications.
  3. Click the Templates tab.
  4. Click netwitness_add.png to configure a template.
  5. In the Define Template dialog, provide the following information:
    1. In the Name field, type the name for the template.
    2. In the Template Type field, select the type of template you want to create. For example, if you are creating a template for global audit logging, select the Audit Logging template type.
      For New Health and Wellness, select New Health & Wellness Alarms template type.
    3. In the Description field, type a brief description for the template.
    4. In the Template field, specify the format for the template, see Define Notification Template Dialog.
    5. Click Save to save the template.
      The following is an example of a template for Audit Logging.
      netwitness_galtmplexmpl_741x553.png

    Duplicate a Template

    You can make a copy of an existing default or user-defined template. To duplicate a template:

    1. Go to netwitness_adminicon_25x22.png (Admin) > System.
    2. In the options panel, select Global Notifications.
    3. Click the Templates tab.
    4. Select the template that you want to duplicate and click netwitness_duplicate_button.png.
      The Duplicate Alert Template dialog is displayed.
      netwitness_duplicatetemplate_434x104.png
    5. Type the name for the duplicate template.
    6. Click OK.

    You can modify a default or user-defined template. When you edit a template, the changes are reflected only when the alert is triggered.

    Edit a Template

    1. Go to netwitness_adminicon_25x22.png (Admin) > System.
    2. In the options panel, select Global Notifications.
    3. Click the Templates tab.
    4. Select a template and click netwitness_edit.png.
    5. In the Define Template dialog, modify the Name, Template Type, Description, and Template fields as required.
    6. Click Save to save the template.

    Delete a Template

    You can delete a user-defined template. When you delete a template that is used in an ESA rule, the Event Stream Analysis default template is used for alerts. You cannot delete templates associated with global audit logging configurations.

    1. Go to netwitness_adminicon_25x22.png (Admin) > System.
    2. In the options panel, select Global Notifications.
    3. Click the Templates tab.
    4. Select one or more templates and click netwitness_delete.png.
      A confirmation dialog is displayed.
    5. Click Yes.
      The selected template is deleted.