Notification when alerts/Incident is resolved

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Notification when alerts/Incident is resolved

L1 Bithead

Hi Community

I am trying to get notifications when alerts or incidents are resolved but it doesnt seem that there is a direct way to do so.
So is there a way to send a notification (Syslog or Email) when an alert or an incident is resolved?
Thanks in advance.

Just another IT Sec guy
1 accepted solution

Accepted Solutions

L4 Transporter

Hi @Belhaj_a, thanks for reaching us using the Live Community.

 

The Incidents and Alerts status changes are stored in the Management Audit Logs dataset, that you can visually access to it from Settings - Management Audit Logs

You can use the Notification Forwarding feature to send syslog or email messages when a Management Audit Log that you need to be notified occurs.

Check the linked article, and you can create a filter like this one on the screenshot to filter the Resolved alerts or incidents only:

jmazzeo_0-1711630310580.png

After the Scope definition you can select an Email distribution list and/or syslog server.

 

If this post answers your question, please mark it as the solution.

JM

View solution in original post

2 REPLIES 2

L4 Transporter

Hi @Belhaj_a, thanks for reaching us using the Live Community.

 

The Incidents and Alerts status changes are stored in the Management Audit Logs dataset, that you can visually access to it from Settings - Management Audit Logs

You can use the Notification Forwarding feature to send syslog or email messages when a Management Audit Log that you need to be notified occurs.

Check the linked article, and you can create a filter like this one on the screenshot to filter the Resolved alerts or incidents only:

jmazzeo_0-1711630310580.png

After the Scope definition you can select an Email distribution list and/or syslog server.

 

If this post answers your question, please mark it as the solution.

JM

Worked like a charm, thanks alot

Just another IT Sec guy
  • 1 accepted solution
  • 533 Views
  • 2 replies
  • 0 Likes
  • 78 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!