Start Demo

Create a detection catalog notification rule

Create a notification rule if you want to receive a notification when new detections become active on your ExtraHop system.

When a detection type status in the detection catalog is set to Active, a notification is sent with information about the detection including the detection type and detection status. The notification will also include the dates that the detection was released and last updated if those dates are available.

Before you begin

  • Users must be granted NDR or NPM module access and have full-write privileges or higher to complete the tasks in this guide.
  • The ExtraHop system must be connected to ExtraHop Cloud Services to send notifications through email.
  • Email notifications are sent from no-reply@notify.extrahop.com. Make sure to add this address to your list of allowed senders.
  1. Log in to the ExtraHop system through https://<extrahop-hostname-or-IP-address>.
  2. Click the System Settings icon and then click Notification Rules.
  3. Click Create.
  4. Click one of the following options:
    • For NDR modules, select Security Detection Catalog.
    • For NPM modules, select Performance Detection Catalog.
  5. Type a unique name for the notification rule in the Name field.
  6. In the Description field, add information about the notification rule.
  7. Specify individual email addresses, separated by a comma.
  8. In the Options section, the Enable notification rule checkbox is enabled by default. Deselect the checkbox to disable the notification rule.
  9. Click Save.
Last modified 2024-10-14