The EDRF email notification feature sends emails to the registered email address for new threats and severity changes in existing threats. Notifications are triggered hourly, providing details of new threat occurrences or severity changes. If no new threats or severity changes occur, no email is sent.
To enable the email notification feature, perform the following steps.
Log in to Trellix EDR.
Navigate to Menu → Configuration → Finetune Configuration, then select Notification.
Toggle Enable email notification to On.
Enter your registered email address.
Note
You can enter either an email address or a distribution list.
Select a Severity Level:
High – Receive notifications for High priority threats and severity changes to High.
Medium – Receive notifications for High and Medium severity threats.
Low – Receive notifications for High, Medium, and Low severity threats.
Note
You only receive emails for threats displayed in the Monitoring dashboard. The system automatically filters notifications based on the selected Threat Display Options settings.
Click Save.
The initial configuration takes effect immediately. Changes to previously configured settings take effect after one hour.
Email notification threat summary
The email notification includes the following threat details:
Subject: Count of High, Medium, and Low priority threats with the timestamp of the last severity change.
Threat Name | Category | First Detected / Severity Upgraded Time |
|---|---|---|
Name of the detected threat.
| Severity level (High/Medium/Low) | Timestamp (YY-MM-DD HH-MM-SS) of a new threat occurrence or the latest severity change of an existing threat.
|