Respond Config: Respond Notification Settings View

Document created by RSA Information Design and Development on Mar 2, 2018Last modified by RSA Information Design and Development on Sep 11, 2018
Version 4Show Document
  • View in full screen mode
 

The Respond Notification Settings view enables you to send email notifications when incidents are created or updated to SOC Managers and the Analysts assigned to the incidents.

Note: The information in this topic applies to RSA NetWitness® Platform Version 11.1 and later.

What do you want to do?

                       
RoleI want to ...Show me how
AdministratorConfigure an email server.Refer to "Configure the Email Settings as Notification Server" in the System Configuration Guide. (To access these settings, click the Email Server Settings link or go to ADMIN > System > Global Notifications > Servers tab.)
Incident Responders, Analysts, Content Experts, SOC ManagerConfigure email notifications for when an incident is created or updated.Configure Respond Email Notification Settings

Related Topics

Quick Look

To access the Respond notification settings, go to CONFIGURE > Respond Notifications.
The Respond Notification Settings view is displayed.

Respond Notification Settings View

The following table lists the Respond notification settings.

                                   
Setting

Description

Email Server

Specifies the Email server that will send the email notifications.

Email Server Settings

Allows you to configure an Email server if the one you want to use for notifications is not listed.

Clicking the Email Server Settings link goes to ADMIN > SYSTEM > Global Notifications. For instructions, refer to "Configure the Email Settings as Notification Server" in the System Configuration Guide.

SOC Manager Email Addresses

Lists the SOC Manager email addresses that receive email notifications when you select Send to SOC Manager in the Notification Types section. You can add and remove email addresses as needed.

Notification Types - Incident Created

Specifies who should receive an email notification when an incident is created.

  • Send to Assignee: When an incident is created, an email is sent to the Analyst assigned to the incident.
  • Send to SOC Manager: When an incident is created, an email is sent to all of the addresses listed in the SOC Manager Email Addresses list.

Notification Types - Incident Updated

Specifies who should receive an email notification when an incident is created.

  • Send to Assignee: When an incident is updated, an email is sent to the Analyst assigned to the incident.
  • Send to SOC Manager: When an incident is updated, an email is sent to all of the addresses listed in the SOC Manager Email Addresses list.

Apply

Applies changes made to Respond Notification Settings. Changes to these settings take effect immediately.

Note: If user email address information is updated in the ADMIN > Security > Users tab, it can take up to two minutes for the new email changes to take effect. Any incident creation or incident update email notifications sent during this time go to the old email address.

You are here
Table of Contents > NetWitness Respond Configuration Reference > Respond Notification Settings View

Attachments

    Outcomes