Email Notifications

You can turn on email notifications on MetaDefender IT Access to receive notifications when certain events occur. The notifications can be sent in HTML or JSON format.

Turn on/Update email notifications

Log into MetaDefender IT Access console
Navigate to Settings > Notification Groups > Emails
Input the emails you would like MetaDefender IT Access sends a notification to. Each email should be on it's own line.
Choose a notification format.
Select events that trigger an email notification.
Click Save and confirm your PIN to save changes.

Info

More information may be added into the email content for both HTML and JSON.
The content in HTML format is only the main content of notification. The full notification includes other static messages.

Admin logged on/off

Subject: [MetaDefender IT Access] Admin logged on: First_Name (email@yourdomain.com)

Event:	Admin logged on
Admin Name:	<admin name>
Admin Email:	<email>
Details:	Admin logged on
Time:	<date and time>

{ "event": "Admin logged on", "first_name": "First Name", "last_name": "Last Name", "email": "email@yourdomain.com", "details": "Admin logged on", "time": "Oct 02, 2017 10:39 AM (UTC)", }

Admin made configuration change

Subject: [MetaDefender IT Access] Admin made configuration change: First_Name (email@yourdomain.com)

Event:	Admin made configuration change
Admin Name:	<Admin Name>
Admin Email:	email@yourdomain.com
Details:	Global Settings (Privacy Setting local IP address is turned off) Global Settings (Privacy Setting MAC address is turned off)
Time:	Oct 12, 2017 10:22 AM (UTC)

{ "event": "Admin made configuration change policy Default", "first_name": "First Name", "last_name": "Last Name", "email": "email@yourdomain.com", "details": ["Issue Settings (Encryption - Report if additional volumes are not encrypted by an approved application)"], "time": "Oct 02, 2017 10:39 AM (UTC)" }

Account has X% license(s) left

Subject: [MetaDefender IT Access] Account is running out of licenses

Event:	Account is running out of licenses
Account Name	OPSWAT IT
Account Email:	it@opswat.com
Device Limit	1000
Device Monitored	990
Number of license left	10
Action Needed	Please contact OPSWAT in order to upgrade your organization's account
Time:	Oct 12, 2017 10:22 AM (UTC)

{ "event": "Account is running out of license", "account_name": "OPSWAT IT", "account_email": "it@opswat.com", "devices_limit":1000, "devices_monitored": 990, "devices_left": 10, "action_needed": "Please contact OPSWAT at https://www.opswat.com/contact in order to upgrade your organization's account", "time": "Oct 02, 2017 10:39 AM (UTC)" }

Device added

Subject: [MetaDefender IT Access] Device added: LINCOLN7

Event:	Device added
Nickname:	LINCOLN7-172911119
Hostname:	LINCOLN7
User:	alice
Device ID:	LINCOLN7
User Identity:	N/A
MAC Address:	19:03:f1:81:21:45
Time:	Oct 09, 2017 09:38 AM (UTC)

{ "event": "Device added", "device_id": "deviceIDxxxx", "nickname": "WSEVN02", "hostname": "WSEVN02", "group_name":"San Francisco", "user_identity": "", "agent_type": "Managed", "time": "Sep 29, 2017 04:56 AM (UTC)", "user": "username", "network_info": [{ "ipv4": "109.184.237.115", "ipv6": "fe80::2d88:eab7:6001:6ec7", "mac": "02:21:9b:06:4b:96", }] }

Device uninstalled by a user

Subject: [MetaDefender IT Access] Device uninstalled by user: LINCOLN8

HTML

Event:	Device uninstalled by user
Nickname:	LINCOLN8-172911119
Hostname:	LINCOLN8
User:	username
Device ID:	LINCOLN8
User Identity:	N/A
MAC Address:	20:03:f1:81:21:45
Time:	Oct 09, 2017 09:54 AM (UTC)

{ "event": "Device uninstalled by user", "device_id": "deviceIDxxxx", "nickname": "WSEVN02", "hostname": "WSEVN02", "group_name":"San Francisco", "user_identity": "", "agent_type": "Managed", "time": "Sep 29, 2017 04:56 AM (UTC)", "user": "username", "network_info": [{ "ipv4": "109.184.237.115", "ipv6": "fe80::2d88:eab7:6001:6ec7", "mac": "02:21:9b:06:4b:96", }] }

Device changed status to compliant

Subject: [MetaDefender IT Access] Changed status to compliant: LINCOLN8

Event:	Device changed status to compliant
Nickname	<nick name>
Hostname	<host name
User	<user>
Details:	Device changed status to compliant
Cirical Issue	false/true
Device ID	<device id>
User Identity	<user identity>
Group Name	<group name>
MAC address	<mac address>
Time	<time>

{ "event": "Changed status to compliant", "device_id": "deviceIDxxxx", "nickname": "WSEVN02", "hostname": "WSEVN02", "group_name":"San Francisco", "user_identity": "", "agent_type": "Managed", "time": "Sep 29, 2017 04:56 AM (UTC)", "issue": { "total_issue": 10, "total_critical_issue": 3, "total_warning_issue": 7 }, "user": "username", "network_info": [{ "ipv4": "109.184.237.115", "ipv6": "fe80::2d88:eab7:6001:6ec7", "mac": "02:21:9b:06:4b:96", }], "details": [ { "category": "AV", "products": [{ "id": "a896b7b839ef62671314990f8d1d6794", "name": "Microsoft Security Essentials", "vendor": "Microsoft Corp.", "version": "4.4.0304.0", "issues": ["Real time protection is on", "Virus definitions were updated within the last 3 days", "A full system scan was run within the last week", "35 threats detected within the last week"], "critical": 1 }] }, { "category": "repeated_threats", "total": 1, "threats": [{ "critical": 0, "file": "C:\\Windows\\KMSEmulator.exe", "scan_time": "2015-05-12T23:32:19Z", "threat_name": "@ApplicUnwnt.Win32/HackKMS.A", "repeat": 2, "product_name": "ESET Endpoint Security", "product_vendor": "ESET", "product_version": "5.0.2211.0", "severity": "0", "action": "5", "type": "0" }] }, { "category": "running_processes", "total": 1, "threats": [{ "critical": 0, "file": "C:\\ProgramData\\WindowsMangerProtect\\ProtectWindowsManager.exe", "hash": "e152e3ea7c356cfed40306ff946233d0", "link":" https://www.metadefender.com/#!/results/file/ZTE3MDkwMXJrb0c5UWFYUFktSHlnYjVIMGot/regular/analysis", "scan_time": "2015-05-13T17:00:34Z", "threat_name": "Generic6.WQW", "details": [{ "threat_name": "ADWARE/ELEX.Gen", "av_name": "ClamAV" }] }] }, { "category": "ip_suspicious", "total": 0, "threats": [] } ] }

Device reported threats

Subject: [MetaDefender IT Access] Daily malware found: LINCOLN8

Event:	Daily malware found
Nickname:	LINCOLN8
Hostname:	LINCOLN8
User:	username
Details:	Threat detected: Trojan.Win32.Heur.Gen (View details on Metadefender Cloud) Path: c:\program files\avast software\avast\avastsvc.exe Detected by: K7, CYREN, Emsisoft, K7, NANO Threat detected: Trojan222.Win32.Heur.Gen (View details on Metadefender Cloud) Path: c:\program files (x86) otepad++\plugins\poormanstsqlformatternppplugin\linqbridge.dll Detected by: CYREN, Emsisoft, K7, NANO, K7
Critical Issue:	true
Device ID:	LINCOLN8
User Identity:	N/A
MAC Address:	N/A
Time:	Oct 09, 2017 10:13 AM (UTC)

{ "event": "Device infection found", "device_id": "deviceIDxxxx", "nickname": "WSEVN02", "hostname": "WSEVN02", "group_name":"San Francisco", "user_identity": "", "agent_type": "Managed", "time": "Sep 29, 2017 04:56 AM (UTC)", "issue": { "total_issue": 10, "total_critical_issue": 3, "total_warning_issue": 7 }, "user": "tle", "network_info": [{ "ipv4": "109.184.237.115", "ipv6": "fe80::2d88:eab7:6001:6ec7", "mac": "02:21:9b:06:4b:96", }], "details": [ { "category": "repeated_threats", "total": 1, "threats": [{ "critical": 0, "file": "C:\\Windows\\KMSEmulator.exe", "scan_time": "2015-05-12T23:32:19Z", "threat_name": "@ApplicUnwnt.Win32/HackKMS.A", "repeat": 2, "product_name": "ESET Endpoint Security", "product_vendor": "ESET", "product_version": "5.0.2211.0", "severity": "0", "action": "5", "type": "0", "existing": 1 }] }, { "category": "running_processes", "total": 1, "threats": [{ "critical": 0, "file": "C:\\ProgramData\\WindowsMangerProtect\\ProtectWindowsManager.exe", "hash": "e152e3ea7c356cfed40306ff946233d0", "link":" https://www.metadefender.com/#!/results/file/ZTE3MDkwMXJrb0c5UWFYUFktSHlnYjVIMGot/regular/analysis", "scan_time": "2015-05-13T17:00:34Z", "threat_name": "Generic6.WQW", "details": [{ "threat_name": "ADWARE/ELEX.Gen", "av_name": "ClamAV" }] }] }, { "category": "ip_suspicious", "total": 0, "threats": [] } ] }

Last updated on

Was this page helpful?