Automatic Mail Notification Task/Rule page

The mail notification task sends email notification of policy violations to users, managers, or others based on defined criteria.

Rule Properties

Rule properties option definitions

Option	Definition
Name	Specifies the name of the task. The name must be unique. This is a required field.
Description	Optional field for additional information.
State	Enabled or disabled. All tasks are enabled by default.
Events to process	Options are: Process all incidents/events (of the selected incident type). Process incidents/events since the last mail notification run. Note By default, tasks are run daily.
Template	Allows the user to select and save a template.
From	Text box to edit the From line of the email.
Recipients	Required field — at least one recipient must be selected.
CC	Allows the user to select or define cc: recipients
Subject	Email subject. Required field.
Body	Email body. Optional field.
Insert variable	Variables such as the policy name or the time the event occurred can be inserted into the email subject or body by selecting a variable from the drop-down list and clicking insert.
Evidence Files	Checkboxes for attaching evidence information: Note You can select any, all, or none of the options. Attach CSV file with evidence list information Attach decrypted evidence files, match-string HTML files, and incident details page incident details page decrypted evidence files decrypted match-string HTML files
Email Size Limitation	Drop-down list for selecting maximum email size.

Rule criteria

This page defines the criteria that trigger the email notification. The Available Properties list includes Trellix DLP properties and ePO - On-prem properties. You can select any combination of properties from the list.

Rule criteria option definitions

Option	Definition
Comparison	Select from the drop-down list. Available comparisons vary with the selected property.
Value	Available values vary with the selected property — some are text fields, some are drop-down lists, some require selecting a predefined definition.