Subscriptions

The Subscriptions page allows users (Space Role: Auditor or Space Role: Administrators only) to configure email delivered notifications that let them stay informed and engaged with important events occurring within the software, ensuring they never miss critical events. By subscribing to notifications, users can receive timely alerts about key activities, such as login activity, new assets, status changes, or any other event they deem important from the Events or Connections report. This proactive communication helps users stay on top of their workflows, enhances productivity, and minimizes the risk of overlooking important actions that could impact their work or decision-making. Subscribing to email notifications streamlines the user experience and ensures they are always in the loop.

Note

• A working SMTP connection is required for email notifications.
• A valid email address must be associated to the user's account to receive the notification to their inbox.

Creating Subscriptions

1. Log in to the 12Port Horizon tenant with a Space Role: Auditor or Space Role: Administrator account.
2. Navigate to My Profile > Subscriptions and click the Add button.

3. Click on the parameter name for details about each or follow the guidance provided here:

   1. Name: Enter a unique, but recognizable name for this subscription.
   2. Type: Select the event type between those available:
      1. Event: Represents an entry from the Events Report
      2. Connection: Represents detected connection events on an asset endpoint.
   3. Predicate: Select a conditions predicate that prescribes whether multiple criteria in the condition rule should be combined using the AND or OR predicate.

   4. Condition: A condition contains one or more criteria combined with an AND or OR predicate (selected above) used to construct a query.

      • Type: The criteria Type allows the user to select notification criteria based on various event parameters.
        • Event: Refer to the system Events Report to investigate possible values for the selection criteria for events to subscribe.
          • Asset: select system events generated about the selected asset.
          • User: select system events generated by the selected user.
          • Level: select system events generated on the certain level such as Error or Information.
          • Category: select system events generates on the certain category such as Operation or Management.
          • Event: select system events with specifies names.
          • Message: select system events with specified message.
        • Connection: Refer to the system Connection Report to investigate possible values for the selection criteria for events to subscribe.
          • Asset: select connections generated about the selected asset.
          • Port: select connections accepted on the specified local port.
          • Address: select connections accepted from the specified foreign address.
          • Violation: select connections triggering policy violations for the assets under monitoring.
          • Process: select connections accepted by the specified local process.
          • Protocol: select connections accepted by the specified local protocol.

      • Match: Criteria match defines the way how the metadata piece selected by the criteria type should be compared with the criteria query for the notification rule criteria check. The subscription criteria supports the following matching types to validate the query matches to the selected piece of metadata selected by the criteria type:

        • Equals means that the query should equal the metadata field.
        • Contains means that the metadata field should contain the query.
        • Regex means that the metadata field should contain the patterns given by the regular expression in the query.

        Note

        Note that some criteria types support only certain match conditions. For example, Level or Asset types only support Equals match.

      • Query: Criteria query defines the value for the subscription criteria check. The query could be an asset, a container, a user, a category, a port or a substring of the matching criteria depending on the selected criteria type.

      • Actions: Criteria actions allow to add or to remove criteria from the subscription condition.

   5. Enabled: An indicator that the subscription notification is enabled.

4. Click the Save button to complete the configuration.

Once the enabled subscription is saved, new generated events that trigger email notifications based on this criteria will be sent to this user's associated email address.

Subscription example for "Login" event notifications

Subscription email notification example for a "Login" event