Skip to main content

Email Notifications

Setting up notifications about new and updated content

S
Written by Sergey Bayrachny

Set Up Email Notifications

Set up email notifications about relevant content that has been released or updated on the SOC Prime Platform.

Enabe/disable notifications using the Send me content release notifications toggle. To configure how often you'd like to receive notifications, use the Select Notification Frequency dropdown.

Define what content you're interested in. You can combine content release notifications with content matching filters, or use either on its own.

Content Release Notifications

Select the Content Release Notifications radio button to make this section active and choose one or more content categories:

  • Deployed content – Get notified when detection rules deployed in your environment are updated

  • Unlocked content – Get notified when detection rules you've unlocked are updated, even if not deployed

  • Other marketplace content – Get notified about updates to detection rules you haven't deployed or unlocked yet

Note: At least one category (Deployed content, Unlocked content, or Other marketplace content) must be enabled while the Content Release Notifications section is active, or you won't be able to save the changes.

Content Matching

Select the Content Matching radio button to make this section active and define what content you're interested in using one or more of the following filters:

  • Search Profile. Get notifications about content that matches the selected Search Profile.

  • Content List. Get notifications about content that matches the selected Content List created in Continuous Content Management.

  • Lucene Search. Get notifications about content that matches the Lucene query you've composed. This is an advanced option for fine-tuned filtering.

Enable/disable the Notify me when SSO creates a new account toggle. Once turned on, you’ll receive an email alert whenever a new user account is created via Single Sign-On. Note that this function is available only for users with Manager role.

Enable/disable the Notify me on Data Plane disconnection toggle and select the Data Plane/s. Once turned on, you’ll receive an email notification if a selected Data Plane/s lose/s connection.

Add an alternative email address in the Alternative notification email section to receive operational system notifications and technical events. All notifications are also sent to your primary email address.

After setting up or editing your preferences, click the Save Changes button at the bottom of the page.

You'll receive email notifications about content that matches any of the set up filters and was released or updated over the period selected in the frequency dropdown.

Note:

If you have no Search Profile or Content List configured, the corresponding dropdowns are disabled. To use them, first set up a Search Profile or Content List.

Unsubscribe from Email Notifications

You can unsubscribe from email notifications using the unsubscribe option in the email you received or by turning off the Send me content release notifications toggle on the Email Notifications page and saving your changes.


Did this answer your question?