ESET Online Help

Search English
Select the category
Select the topic


You have to choose at least one means of distribution.

Send SNMP Trap

Sends an SNMP Trap. The SNMP Trap notifies the Server using an unsolicited SNMP message. For more information, see How to configure an SNMP Trap Service.

Send email

Sends an email message based on your email settings. By default, the notification email is in HTML form and there is an ESET PROTECT On-Prem logo in the header. You can have a custom logo and different logo positions according to your customization settings (Light background logo).

If Send email is selected, insert at least one email recipient.

Email address—Type the email address of the recipients of the notification messages.

Click add_new_hover to add a new address field.

To add multiple users, click More > Add users (add the address of the user from the Computer Users), or More > Import CSV or Paste from clipboard (Import a custom list of addresses from a CSV file structured with delimiters).

More > Paste from clipboard—Import a custom list of addresses separated with custom delimiters. This feature works similarly to CSV import.

Send Syslog

You can use ESET PROTECT On-Prem to send notifications and event messages to your Syslog server. Also, you can export logs from a client's ESET product and send them to the Syslog server. Syslog severity—Choose the severity level from the drop-down menu. Notifications will then appear with selected severity on the Syslog server.

Basic fields in the Distribution

Message preview—A preview of the message appearing in the notification, which contains configured settings in text form. You can customize the message's content and subject, and use variables that will be converted to actual values when the notification is generated. This is optional, but it is recommended to better filter.

oSubject—The subject of a notification message; click the edit edit_default icon to edit the content; an accurate subject can improve message sorting and filtering

oContent—Click the edit edit_default icon to edit the content; after editing the content, you can click the reset icon_reset_default icon to reset the default message content


For Events on managed computers or groups, you can add variables to Subject and Content to include specific information in the notification. Click Add variable or start typing $ to display the list of variables.



oLocale—Language of the default message; the message content is not translated

oTimezone—Set the time zone for the Time of occurrence ${timestamp} variable, which can be used in the customized message


If the event happens at 3:00 local time and the local time is UTC+2, but the selected time zone is UTC+4, the time reported in the notification would be 5:00.

Click Finish to create a new notification based on the template you are editing.