Trend Micro email alerts

Reporting
1

I am using BigFix 9.2.7 with TrendMicro deployed in the environment. I was wondering if there is anyway to configure email alerts for the below setting:

  1. Virus attack alerts
  2. Quarantine Files alerts.

Or is it possible to configure any email alerts at all.

Thanks

2

@diwanker

I’m looking for this too… For a long time. So far, no success. The only thing we tried to do is to have Webreports send an automatic mail when the status of a report changes, but that doesn’t work… And the reports in Webreports aren’t up to date either…

3

This is certainly possible to do through the “Scheduled Activities” function of Web Reports. See the following link for more details on how to create Scheduled Activities:

https://www.ibm.com/support/knowledgecenter/SSQL82_9.5.0/com.ibm.bigfix.doc/Platform/Web_Reports/c_creating_scheduled_activities.html

For this particular use case, you’ll want an ‘Alert’ type report, and to specify an activity trigger to generate the report when certain conditions are met (such as if a virus is detected). Below is an example of how this might look:

Pasted image461×597 23.9 KB

3 Likes
4

Hey Aram,

Thanks for your response, this is very helpful. I was wondering if we could schedule a regular report as well for the entire environment as well like a scheduled weekly summary report that includes the end point info, virus engine version info , virus pattern info.

Appreciate your guidance with this a lot.

Thanks

5

Hi @Aram

Thanks for your answer, great. I’ve created the report, hopefully it works.

How did you get the property “Detected Viruses Count”? What other properties are still there? :smile:

Thanks!

6

You can certainly create a report that is periodically emailed, or archived that contains various endpoint data. You would essentially create and save the report you wish (in this case, you might create the report by going to ‘Explore Data -> Computers’ then clicking ‘Edit Columns’ and selecting the properties of interest - a quick/simple way to filter on the properties of interest is to type the Analysis name in the live search), then create a Scheduled Activity for that report.

7

The “Detected Viruses Count” property is part of the Trend Micro - Core Protection Module Fixlet Site. It contains quite a lot of other useful properties as well for managing CPM.

8

Hi

Yes, we ue that Site too. But is there somewhere a list of all the properties etc with their explanation? Because there is a lot of properties and the name is not always that clear.

Thanks.