AnsweredAssumed Answered

Alert Configuration

Question asked by Hemant Kumar on Dec 9, 2015
Latest reply on Dec 10, 2015 by RSA Admin

We are using RSA SA 10.4 AIO without ESA.

 

How can I configure alerts such that when X amount of alerts come in of the same event, only one alert gets sent to the recipients displaying the times the event occurred.

 

Use Case:

  A group got added to the local administrators group on multiple systems within 5 minutes of each other. Currently, we will get  10 email alerts in a row. We would like one email alert showing all 10 events when it occurs within specified time frame. Eg. Within 5 minutes

Outcomes