Scheduling an Email Report of Notified Transactions

Attach a saved transaction view to a schedule so that notified policy matches are emailed to you at a set interval.

Notify raises a notification in the console but does not send email at the moment a policy matches. A schedule is how you get that activity into an inbox. It runs at the interval you set, queries the saved view for the period since it last ran, and emails the matches it finds.

Before you begin: You must have a saved transaction view that filters on notify=true, stored in the Global folder. See Creating a Filtered View of Notified Transactions.

Steps

Go to Insights › Scheduler.
Create a new schedule.
Enter a name for the schedule.
Add your saved transaction view as the attachment.

Note: Only views saved to the Global folder appear in this list.
Set the frequency at which the schedule runs.

For example, every 15 minutes for close monitoring, or once a day for a summary.
Enter the recipients who should receive the report.

Note: Recipients are set on the schedule, not on the policy. Anyone you list here receives the report, whether or not they are an administrator.
Enter the subject and body of the email.
Save the schedule.

Result

The schedule runs at the interval you set. Each run returns the notified transactions recorded since the previous run and emails them to your recipients. When there are no matches in an interval, no email is sent.

Next steps

If the reports are arriving too often, or too rarely to be useful, edit the schedule and adjust the frequency. Changing the frequency does not affect the saved view or the policies behind it.