Patch Notification

Patch Notifications alert you the moment something needs attention, a deployment finishes, a device fails, a ring is waiting for your approval, or a patch is about to miss its SLA due date, so you don't have to keep checking the dashboard or patch lists yourself.

Enable Patch Notification for Your Account

Step 1. Create a Notification Group

  1. To create a notification group, navigate to Settings > Notification Groups

  2. Select Create New Group to begin


  1. In the notification group creation page, fill in configuration fields

Fields

Details

Fill in the group's details


Fill in the group's details, including group name, email format, and group member emails

Choose event triggers


Select Patch Management from the dropdown, then select the checkbox for each event you want this group to receive. You must select at least one.

  1. Select Save

Step 2. Assign Notification Group to Account

A notification group only sends alerts once it's assigned to your account.

  1. In the left navigation, select Settings > Global

  2. Open the Notifications tab

  3. Select Assign Group, then choose the notification group you created


Enable Patch Notification for Webhook and SIEM Integration

You can configure patch notification to send email alert to the external security and logging tools your team already monitors.

Webhook

Step 1: Create a webhook. See Webhook guidelines.

Step 2: Create a Notification Group

  1. Navigate to Setting > Integration, choose Group under Webhook Integration tab

  2. Click Create New Group, then fill in Group Name

  3. Under Triggers, select Patch Management from the dropdown, then select the checkbox for each event you want this group to receive. You must select at least one.

  4. Select the group and assign it to the account


S3 Log Storage, Syslog, or Google Cloud Logging

  1. Navigate to Setting > Integration

  2. Choose corresponding tabs

  3. Click Enable checkbox

  4. Select patch events under Patch Management section

  5. Click Save


How Notifications Show Up

Locations

What You'll See

In-app bell


A card with the event title, message, and timestamp. Select it to jump straight to the relevant page

Email


Subject line is the event title. The body shows a simple Event, Details, Time table

Webhook

An HTTP POST to your configured callback URL

S3 Log Storage, Syslog, Google Cloud Logging

A structured log entry alongside your other My OPSWAT Central Management events

Sample Notification Contents

Email

Subject: [My OPSWAT Central Management] New Missing OS Patches detected

My OPSWAT Central Management has automatically generated the following notification:

Event

New Missing OS Patches detected

Details

5058383 - Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.435.97.0) - Current Channel (Broad) - Important severity.

Time

2026-08-03 02:07:04 UTC

 If you wish to no longer receive this email, please log into the My OPSWAT Central Management console, and adjust your email notification settings at Settings > Global > Notifications

JSON

{ "eventTitle": "New Missing OS Patches detected", "message": "5058383 - Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.435.97.0) - Current Channel (Broad) - Important severity.", "productName": "My OPSWAT Central Management", "time": "2026-08-03 02:07:04 UTC" }

Webhook

[ { "event_code": "OS_MISSING", "title": "New Missing OS Patches detected", "message": "New Missing OS Patches detected - 5058383 - Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.435.97.0) - Current Channel (Broad) - Important severity.", "subject": { "kb_id": "5058383", "patch_id": "patch_987", "name": "Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.435.97.0) - Current Channel (Broad)", "severity": "Important" } } ]

Syslog

SYSLOG

<14> Aug 03 02:07:04 OPSWAT New OS missing patch detected - New Missing OS Patches detected: 5058383 - Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.435.97.0) - Current Channel (Broad)

Common Event Format (CEF)

CEF:0|OPSWAT|MOCM|<cm10Version>|account_events.os_missing|New OS missing patch detected|2|dvchost=<hostname> msg=New Missing OS Patches detected: 5058383 - Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.435.97.0) - Current Channel (Broad)

S3 Log Storage / Google Cloud Logging

{ "type": "Patch Management", "log_type": "os_missing", "timestamp": "2026-08-03T02:07:04Z", "details": "New Missing OS Patches detected: 5058383 - Security Intelligence Update for Microsoft Defender Antivirus - KB2267602 (Version 1.435.97.0) - Current Channel (Broad)", "severity": "Important" }