Highlighted
Established Member.
308 views

creating a notification with multiple addresses in the TO: field

I'm still learning Arcsight, so forgive me if this is covered somewhere I missed.

 

I am looking to create a notification where multiple people/groups would show up in the TO: field.  That way if someone were to reply to say a virus alert, everyone would be notified.

 

I know I could do this via an exchange DL, but I was hoping to do it natively in Arcsight.

0 Likes
3 Replies
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Hello,

Use your Arcsight Console to access the Notification section.

hen create a new group or used the one that exist. Inside the group define the users with their name and e-mail address.

On the resource used to send the notification instead of choosing one user select the group. The notification will be send to all the user part of that group.

I hope that this will help you to achieve your expectation.

Best Regards,

 Daniel

0 Likes
Highlighted
Regular Contributor.. Regular Contributor..
Regular Contributor..

If there is no native support You can use dedicated e-mail Python script, that can be fired as otucome of rule.

 Then You can do whatever you want with the variables given from Arcsight to the script.

0 Likes
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Hi,

Easy way is creating a new notification group and add all users with their name and e-mail address inside.

on the rule add notification group instead of emails.

I hope that this will help you to achieve your expectation.

Cheers

Gayan

Mr
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.