Customize Event Source Monitoring Emails
I would like to customize the event source monitoring emails template used by Automatic Monitoring to add: Threshold Violated, Event Count, and Elapsed Time. Currently, the event source monitoring emails only include three items: Source, Type and Alarm Type. I have narrowed down the code where I probably should do my mod in the template to the following lines, but I am at a lost in how to call the information I need. Any help would be appreciated.
<#list lowAlarmEventSources as es>
<#list es?split("^") as x>
- Community Thread
- email template
- Forum Thread
- RSA NetWitness
- RSA NetWitness Platform
The default email template has below fields as of now -
group – esm group name.
highThresholdCount – associated high threshold set in the monitoring policy.
highThresholdWindow – associated high threshold window set in the monitoring policy
lowThresholdCount – associated low threshold count set in the monitoring policy.
lowThresholdWindow – associated low threshold window set in the monitoring policy.
lowAlarmEventSources – list of strings event sources which has breached low count threshold.
highAlarmEventSources – list of strings event sources which has breached high threshold.
highAlarmsCount – count of event sources on high alarm.
lowAlarmsCount – count of event sources on low alarm.
version – current sms version.
At this point only the above attributes can be used. the other attributes cannot be used.