Views:

Configure the following event notification to notify administrators when incident details have been updated.

  1. Go to Detections > Notifications > Event Notifications.

    The Event Notifications screen appears.

  2. Click Data Loss Prevention.

    A list of events appears.

  3. In the Event column, click Incident details updated.

    The Incident Details Updated screen appears.

  4. Specify the criteria for the incident detail updates to be notified about:

    Criteria

    Description

    Incident detail updates

    Select the type of incident detail updates.

    • Closed

    • Any change

    Filter by severity level

    Select one of more of the following risk levels.

    • High

    • Medium

    • Low

    • Informational

    • Undefined
  5. Enable one or more of the following notification methods.

    Method

    Description

    Email message

    To customize the email notification template, use supported token variables or modify the text in the Subject and Message fields.

    For more information, see Standard Token Variables and Data Loss Prevention Token Variables.
  6. To test if recipients can receive the event notification, click Test.
  7. Click Save.
Parent topic: Data Loss Prevention Events