000033118 - How to configure meta details in Reporting Engine email body rather than the Investigation page link in RSA Security Analytics

Document created by RSA Customer Support Employee on Jun 30, 2016•Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 5Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000033118
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Security Analytics Server, Security Analytics UI
RSA Version/Condition: 10.3.x, 10.4.x, 10.5.x,10.6.x
 
IssueBy Default, The SMTP notification email body includes the Investigation page link as below. However, it may be necessary to have meta details instead of just the link in email body.
User-added image
Tasks
  1. Replace the investigation page link with below details in email Body.
    Device Type= ${meta.device.type}
    Device IP= ${meta.device.ip}
    Time=${meta.time}
    Event Time= ${meta.event.time}


    Similarly, other meta details can be mentioned in email body.
     
  2. When email notification sent to email id, the output will be as below.
    User-added image
 

Attachments

    Outcomes