<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Alert notification content sent to email in Prisma Cloud Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/prisma-cloud-discussions/alert-notification-content-sent-to-email/m-p/593292#M1248</link>
    <description>&lt;P&gt;Hi Team,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I'd like to check if it's possible to set which Remediation section/field will be sent when an alert is manually sent to Email (or Slack).&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;For example, the policy&amp;nbsp;&lt;STRONG&gt;Azure Storage account is not configured with private endpoint connection&lt;/STRONG&gt;&amp;nbsp;-&amp;nbsp; This policy only has an entry in the Recommendation for Remediation section and nothing for Enter CLI command or CLI Command Description.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;So if I open an alert for this policy and go Send to &amp;gt; Email - The email would contain the description on the Recommendation for Remediation section.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;However for another policy like&amp;nbsp;&lt;STRONG&gt;Azure App Service Web app client certificate is disabled &lt;/STRONG&gt;- This policy&amp;nbsp;has entries for all 3 of the Remediation fields mentioned above. The "How to Remediate" received via email from this alert contains the CLI command description which isn't quite as helpful as the Recommendation for Remediation section which contains the steps to Remediate the alert.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If it's not possible to change, would anyone be able to advise of any other alternatives as the Email Message field when Sending to Email also has a character/word limit.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Cheers.&lt;/P&gt;</description>
    <pubDate>Mon, 29 Jul 2024 08:47:52 GMT</pubDate>
    <dc:creator>JeremyMiguel</dc:creator>
    <dc:date>2024-07-29T08:47:52Z</dc:date>
    <item>
      <title>Alert notification content sent to email</title>
      <link>https://live.paloaltonetworks.com/t5/prisma-cloud-discussions/alert-notification-content-sent-to-email/m-p/593292#M1248</link>
      <description>&lt;P&gt;Hi Team,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I'd like to check if it's possible to set which Remediation section/field will be sent when an alert is manually sent to Email (or Slack).&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;For example, the policy&amp;nbsp;&lt;STRONG&gt;Azure Storage account is not configured with private endpoint connection&lt;/STRONG&gt;&amp;nbsp;-&amp;nbsp; This policy only has an entry in the Recommendation for Remediation section and nothing for Enter CLI command or CLI Command Description.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;So if I open an alert for this policy and go Send to &amp;gt; Email - The email would contain the description on the Recommendation for Remediation section.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;However for another policy like&amp;nbsp;&lt;STRONG&gt;Azure App Service Web app client certificate is disabled &lt;/STRONG&gt;- This policy&amp;nbsp;has entries for all 3 of the Remediation fields mentioned above. The "How to Remediate" received via email from this alert contains the CLI command description which isn't quite as helpful as the Recommendation for Remediation section which contains the steps to Remediate the alert.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If it's not possible to change, would anyone be able to advise of any other alternatives as the Email Message field when Sending to Email also has a character/word limit.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Cheers.&lt;/P&gt;</description>
      <pubDate>Mon, 29 Jul 2024 08:47:52 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/prisma-cloud-discussions/alert-notification-content-sent-to-email/m-p/593292#M1248</guid>
      <dc:creator>JeremyMiguel</dc:creator>
      <dc:date>2024-07-29T08:47:52Z</dc:date>
    </item>
    <item>
      <title>Re: Alert notification content sent to email</title>
      <link>https://live.paloaltonetworks.com/t5/prisma-cloud-discussions/alert-notification-content-sent-to-email/m-p/593338#M1249</link>
      <description>&lt;P&gt;Hello Jeremy&lt;/P&gt;
&lt;P data-unlink="true"&gt;Customizing the email fields is currently not supported. However, an alternative to this would be using a &lt;A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000kHroCAE&amp;amp;lang=en_US%E2%80%A9" target="_self"&gt;custom webhook&lt;/A&gt;&amp;nbsp;to send alert notifications, process them through automation to filter fields, and then send them to the mail server.&amp;nbsp;&lt;/P&gt;
&lt;P data-unlink="true"&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-unlink="true"&gt;Regards&lt;/P&gt;
&lt;P data-unlink="true"&gt;Bishvesh Pachauli&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 29 Jul 2024 17:26:31 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/prisma-cloud-discussions/alert-notification-content-sent-to-email/m-p/593338#M1249</guid>
      <dc:creator>bpachauli</dc:creator>
      <dc:date>2024-07-29T17:26:31Z</dc:date>
    </item>
  </channel>
</rss>

