ESET Online Help

Search English
Select the topic

Distribution

You have to choose at least one means of distribution.


important

You can select both means of distribution—Send email and Send webhook and then:

1.Fill in the Email distribution settings.

2.Fill in the Webhook distribution settings.

 

Send email

If Send email is selected, insert at least one email recipient.By default, the notification email is in HTML form and there is an ESET PROTECT logo in the header.

Email Distribution settings

Email address—Type the email address of the recipients of the notification messages.

Click add_new_hover to add a new address field.

To add multiple users, click More > Add users (add the address of the user from the Computer Users), or More > Import CSV or Paste from clipboard (Import a custom list of addresses from a CSV file structured with delimiters).

More > Paste from clipboard—Import a custom list of addresses separated with custom delimiters. This feature works similarly to CSV import.

Include a link in the email—Select the check box to include a link to the Web Console with details about the event from the notification.

Send test email—Click Send button to send a test email to the above address.

Send webhook

You can use ESET PROTECT to send notifications as webhooks. You can receive notifications from ESET PROTECT as messages in your primary communication channel.

Webhook URL—Type the communication channel's webhook URL


example

See an example of the Teams webhook URL below:

https://xxxxx.webhook.office.com

After you type the Teams webhook URL, JSON payload is not displayed.

oInclude a link in the webhook content—Select the check box to include a link to the Web Console with details about the event from the notification; this feature is valid for Teams webhooks

oWhen you type your customized webhook URL (not Teams or Slack) you can set Authentication

JSON payload—Type the valid JSON. You can use variables—click Add variable and select the variable—Subject, Content, Link

oWhen you fill in the Subject and Content in the Message preview, the variables values will be automatically used in the JSON payload

oTo create a customized JSON payload for a third-party communication channel, see their official help, for example, Discord

Authentication—displays when you type a customized webhook link. You can protect your data and enhance security with webhook authentication. Select:

oNo authentication—select this option when the webhook receiver has no authentication scheme. We recommend adding authentication to protect data and enhance security.

oBearer token—type bearer token into the field Bearer token.

oBasic authentication—type Username and Password into the fields.

Send test webhook—Click Send button to send a test webhook to the provided webhook link.

 

Basic fields in the Distribution

Message preview—A preview of the message appearing in the notification, which contains configured settings in text form. You can customize the message's content and subject, and use variables that will be converted to actual values when the notification is generated. This is optional, but it is recommended to better filter.

oSubject—The subject of a notification message; click the edit edit_default icon to edit the content; an accurate subject can improve message sorting and filtering

oContent—Click the edit edit_default icon to edit the content; after editing the content, you can click the reset icon_reset_default icon to reset the default message content


note

For Events on managed computers or groups, you can add variables to Subject and Content to include specific information in the notification. Click Add variable or start typing $ to display the list of variables.

 

General

oLocale—Language of the default message; the message content is not translated

oTimezone—Set the time zone for the Time of occurrence ${timestamp} variable, which can be used in the customized message


example

If the event happens at 3:00 local time and the local time is UTC+2, but the selected time zone is UTC+4, the time reported in the notification would be 5:00.

Click Finish to create a new notification based on the template you are editing.