Set up Patch Management notifications in Nebula

Nebula can notify you when events occur, such as when a patch is available or installed. Use the Notifications settings to choose which notifications you want to receive. This article explains how to configure notifications. For more information on all notifications, see Set up notifications in Nebula.

Configure notifications

1. On the left navigation menu, go to Configure > Notifications.
2. Click New notification to set up a new Nebula notification. 
3. On the General settings step, fill out the information and click Next.
   • Notification name: Title for the notification.
   • Description: A brief description of the notification.
   • Owner: The owner of the notification. This field is automatically set to the logged-in user. Notifications can be modified by any Super Admins or the notification owner. Super Admins can change the notification owner if required.
4. On the Category step, select Vulnerability & Patch Management.
5. Select a category and click Next. 
6. On the Conditions step, select your Conditions to filter out unwanted notifications. Click the add or delete button on the right side to add or remove a condition, then click Next. The following conditions are available for these categories:
   • Software update applied: Notifies you when a software update is successfully applied.
     • Status
     • Operating system
     • Endpoint
     • Group
   • Patch applied: Notifies you when a patch is attempted on an endpoint.
     • Status
     • Operating system
     • Preview patch
     • Endpoint
     • Group
   • Patch or software update available: Notifies you when a new patch or software update becomes available.
     • Application
     • Vendor
     • Severity
     • Operating system
     • Reboot required
     • Preview patch
     • Endpoint
     • Group
   • Ignore OS Patch or Software Update Rule action: Notifies you when a patch or software update rule is configured to ignore specific software or patches.
     • Action
7. On the Delivery step, select a delivery method(s) and click Next.
   • For Email or Call Webhook:
     1. Enter a subject for the Subject line.
     2. Select available email recipients in the drop down menu, or enter custom email recipients to receive notifications.
   • For ThreatDown admin app, you must click Allow notifications in the mobile app under Settings > Notifications. 
   • For Slack:
     • Select Slack channels from the drop-down list. These are public channels pulled from your workspace and include private channels if configured in Slack.
   • For Microsoft Teams:
     • Select Teams conversations from the drop down list. These conversations are pulled from your workspace where the Malwarebytes Notifications app is added.
8. On the Content step, toggle Enable aggregation, if you want to group multiple alerts into a single notification. If enabled, select an Interval and view type.
   • Summary view: Provides a brief overview of the events found with an attached CSV document containing the full details and a link to view the events directly in the console. If an admin has already acted on the alerts, the information in the console may not match the data in the CSV file.
   • Detailed view: Contains the full details of the events in the notification email itself.
9. Select tiles based on the desired content you want the notification to contain
10. 
11. Click Complete to finish setting up the notification.

Return to Patch Management guide.