Abstract
Notify users via email when an engine disconnects by adding a server configuration in Cortex XSIAM.
You can specify which Cortex XSIAM users receive an email notification when an engine disconnects.
Go to
→ → → .Add the following key and value.
Key
Value
engines.notification.users
A comma-separated list of users. For example,
user1,user2,user3