Firewall-Log Forwarding-Email alert sending multiple message customization to avoid huge email

[ecesureshkumar]

Hi Team,

We have configured log forwarding on critical policies and facing challenge lot of emails getting generated and triggered multiple mails. Need experts input for customization of email sent to recipient with subject "x number of times" example. This will avoid huge email traffic flow.

Thanks in advance.

[reaper]

hi @ecesureshkumar 

the log forwarding profile is intended to forward messages immediately, so there is no mechanism to hold messages for an amount of time and then send a count

if these messages are not so critical you need to receive them immediately, you could opt to create a daily custom report that tells you how many times a rule was hit and have that emailed out once a day