Set up notifications to receive alerts when your configured block rules block applications. Use the Notifications settings to choose which notifications you want to receive. For more information on all notifications, see Set up notifications in OneView.
Configure notifications
- On the left menu click Configure > Notifications.
- Click New to set up a new OneView notification.
- On the General settings step, enter your Notification name and Description and click Next.
- On the Category step, select Endpoint agent activity > Application block and click Next.
- On the Conditions step, specify or select all sites to receive notifications from and select conditions to filter out unwanted notifications, then click Next.
- On the Delivery step, select a delivery method(s) and click Next.
- For Email or Call Webhook:
- Enter a subject for the Subject line.
- Select available email recipients in the drop down menu, or enter custom email recipients to receive notifications.
Note: Selected recipients will receive notifications for all sites added on the conditions page, even if the user is not assigned to the site in Nebula. Create separate notifications for adding site-specific recipients.
- For Slack:
- Select Slack channels from the drop-down list. These are public channels pulled from your workspace and include private channels if configured in Slack.
- For Microsoft Teams:
- Select Teams conversations from the drop down list. These conversations are pulled from your workspace where the Malwarebytes Notifications app is added.
- For Email or Call Webhook:
- On the Content step, toggle Enable aggregation, if you want to group multiple alerts into a single notification. If enabled, select your Interval and Grouped by options.
- Select tiles based on the desired content you want the email or webhook notification to contain.
- Click Complete to finish setting up the notification.
Return to Application Block.