pstoric 0 Posted October 26, 2020 Share Posted October 26, 2020 We've recently enabled email notifications but the volume of alerts we are getting is way too much and it's for items that ESET is quarantining which makes it not a threat. Is there a way to only receive and email alert for and items detected buy not cleaned? The one below I'm pointing to seems to be about detections found but not cleaned only during a scan but what if someone downloads somethings malicious and it's found but can't be cleaned which would be outside of a detection window. Link to comment Share on other sites More sharing options...
Administrators Marcos 4,703 Posted October 26, 2020 Administrators Share Posted October 26, 2020 Since you don't want to be notified of threats that were 100% cleaned, I assume the following notifications are those you would like to get: Link to comment Share on other sites More sharing options...
pstoric 0 Posted October 26, 2020 Author Share Posted October 26, 2020 1 hour ago, Marcos said: Since you don't want to be notified of threats that were 100% cleaned, I assume the following notifications are those you would like to get: But the first option in your pic is for items detected during computer scans by ESET but 90% of mine are from real-time detection so I'm not sure if that would apply. Link to comment Share on other sites More sharing options...
Administrators Solution Marcos 4,703 Posted October 26, 2020 Administrators Solution Share Posted October 26, 2020 A custom report like this could work: Link to comment Share on other sites More sharing options...
pstoric 0 Posted October 27, 2020 Author Share Posted October 27, 2020 Thanks for the tip! I'm going to try that today and disable the other one but the only thing I'm concerned about is how can I test it? Is there something like eicar I can use that ESET would detect but not be able to clean? Link to comment Share on other sites More sharing options...
Administrators Marcos 4,703 Posted October 27, 2020 Administrators Share Posted October 27, 2020 I assume it should be possible to test it by changing the real-time protection cleaning level to "Always ask user" and selecting No action when eicar is detected. pstoric 1 Link to comment Share on other sites More sharing options...
pstoric 0 Posted October 27, 2020 Author Share Posted October 27, 2020 2 hours ago, Marcos said: I assume it should be possible to test it by changing the real-time protection cleaning level to "Always ask user" and selecting No action when eicar is detected. Thanks! it seems to be working. I'll monitor it over the next few days but looks like I'm in the right direction. Link to comment Share on other sites More sharing options...
Recommended Posts