The Application Settings > Notifications page allows you to configure email notifications for alerts, bytes per second (BPS) oversubscription, and observable feed sharing failures.
.png "XDR_ConfigureEmailNotifications.png")
Alert notifications—You can configure email notifications for all alerts or fine-tune the settings so you will not be overwhelmed by notifications. For example, you can disable email notifications for low and medium alerts, while enabling notifications for high and critical alerts. Alert notifications for the organization are enabled by default.
The average number of alerts generated each day for each alert level is displayed in the Alert Level column. The Summary section gives an estimate of the number of emails that will be sent to all users each day with the current settings.
URLs in email notifications are rewritten as non-clickable text to prevent accidental clicking of malicious links and to bypass additional and Email Security - Cloud analysis. For example:
Original URL: https://www.malicious.com/uri_part_of_url/id?-123
Rewritten URL: hXXps://www[.]malicious[.]com/uri_part_of_url/id?=123
BPS oversubscription notifications—You can enable email notifications to be sent when the average bytes per second (BPS) in your environment exceeds your contracted BPS during the past hour. Another email is sent after seven days. BPS oversubscription notifications for the organization are enabled by default.
Notifications format—You can choose the format of email notifications to be either HTML or text. This is a global setting which applies to all email notifications. The default setting is HTML.