Distribution
You have to choose at least one means of distribution.
You can select both means of distribution—Send email and Send webhook and then: 1.Fill in the Email distribution settings. 2.Fill in the Webhook distribution settings. |
Send email
If Send email is selected, insert at least one email recipient.By default, the notification email is in HTML form and there is an ESET PROTECT logo in the header.
Email Distribution settings
•Email address—Type the email address of the recipients of the notification messages.
•Click to add a new address field.
•To add multiple users, click More > Add users (add the address of the user from the Computer Users), or More > Import CSV or Paste from clipboard (Import a custom list of addresses from a CSV file structured with delimiters).
•More > Paste from clipboard—Import a custom list of addresses separated with custom delimiters. This feature works similarly to CSV import.
Include a link in the email—Select the check box to include a link to the Web Console with details about the event from the notification.
Send test email—Click Send button to send a test email to the above address.
Send webhook
You can use ESET PROTECT to send notifications as webhooks. You can receive notifications from ESET PROTECT as messages in your primary communication channel.
•Webhook URL—Type the communication channel's webhook URL
See an example of the Teams webhook URL below: https://xxxxx.webhook.office.com/ Any webhook created with Microsoft Workflows (or migrated to it) with a link as hxxps://xxxx-01.xxxxxx.logic.azure.com:443/workflows/ will not currently work. After you type the Teams webhook URL, JSON payload is not displayed. |
oInclude a link in the webhook content—Select the check box to include a link to the Web Console with details about the event from the notification; this feature is valid for Teams webhooks
oWhen you type your customized webhook URL (not Teams or Slack) you can set Authentication
•JSON payload—Type the valid JSON. You can use variables—click Add variable and select the variable—Subject, Content, Link
oWhen you fill in the Subject and Content in the Message preview, the variables values will be automatically used in the JSON payload
oTo create a customized JSON payload for a third-party communication channel, see their official help, for example, Discord
•Authentication—displays when you type a customized webhook link. You can protect your data and enhance security with webhook authentication. Select:
oNo authentication—select this option when the webhook receiver has no authentication scheme. We recommend adding authentication to protect data and enhance security.
oBearer token—type bearer token into the field Bearer token.
oBasic authentication—type Username and Password into the fields.
•Send test webhook—Click Send button to send a test webhook to the provided webhook link.
Basic fields in the Distribution
•Message preview—A preview of the message appearing in the notification, which contains configured settings in text form. You can customize the message's content and subject, and use variables that will be converted to actual values when the notification is generated. This is optional, but it is recommended to better filter.
oSubject—The subject of a notification message; click the edit icon to edit the content; an accurate subject can improve message sorting and filtering
oContent—Click the edit icon to edit the content; after editing the content, you can click the reset icon to reset the default message content
For Events on managed computers or groups, you can add variables to Subject and Content to include specific information in the notification. Click Add variable or start typing $ to display the list of variables. |
•General
oLocale—Language of the default message; the message content is not translated
oTimezone—Set the time zone for the Time of occurrence ${timestamp} variable, which can be used in the customized message
If the event happens at 3:00 local time and the local time is UTC+2, but the selected time zone is UTC+4, the time reported in the notification would be 5:00. |
Click Finish to create a new notification based on the template you are editing.