Respond Config: Respond Notification Settings View

Document created by RSA Information Design and Development on Mar 2, 2018Last modified by RSA Information Design and Development on Mar 27, 2018
Version 3Show Document
  • View in full screen mode
 

The Respond Notification Settings view enables you to send email notifications when incidents are created or updated to SOC Managers and the Analysts assigned to the incidents.

Note: The information in this topic applies to RSA NetWitness® Suite Version 11.1 and later.

What do you want to do?

                       
RoleI want to ...Show me how
AdministratorConfigure an email server.Refer to the System Configuration Guide. Click the Email Server Settings link or go to ADMIN > SYSTEM > Global Notifications.
Incident Responders, Analysts, Content Experts, SOC ManagerConfigure email notifications for when an incident is created or updated.Configure Respond Email Notification Settings

Related Topics

Respond Notification Settings

To access the Respond notification settings, go to CONFIGURE > Respond Notifications.
The Respond Notification Settings view is displayed.

Respond Notification Settings View

The following table lists the Respond notification settings.

                                   
Setting

Description

Email Server

Shows the Email server that will send the email notifications.

Email Server SettingsIf the Email server that you would like to use for notifications is not listed in the Email Server drop-down list, you can configure the email server settings. Click the Email Server Settings link to go to ADMIN > SYSTEM > Global Notifications. For instructions, refer to the System Configuration Guide.

SOC Manager Email Addresses

Lists the SOC Manager email addresses that will receive email notifications when you select Send to SOC Manager in the Notification Types section. You can add and remove email addresses as needed.

Notification Types - Incident Created

Shows who should receive an email notification when an incident is created.

  • Send to Assignee: When an incident is created, an email is sent to the Analyst assigned to the incident.
  • Send to SOC Manager: When an incident is created, an email is sent to all of the addresses listed in the SOC Manager Email Addresses list.

Notification Types - Incident Updated

Shows who should receive an email notification when an incident is created.

  • Send to Assignee: When an incident is updated, an email is sent to the Analyst assigned to the incident.
  • Send to SOC Manager: When an incident is updated, an email is sent to all of the addresses listed in the SOC Manager Email Addresses list.

Apply

Changes to these settings take effect immediately.

Note: If user email address information is updated in the ADMIN > Security > Users tab, it can take up to two minutes for the new email changes to take effect. Any incident creation or incident update email notifications sent during this time will go to the old email address.

You are here
Table of Contents > NetWitness Respond Configuration Reference > Respond Notification Settings View

Attachments

    Outcomes