Question & Answer
Question
How do you set up email notifications in QRadar EDR (formerly ReaQta)?
Answer
Log in to the ReaQta hive server dashboard and click the bell icon in the upper right corner of the screen.
Click the wheel icon at the bottom of the Notifications section.
You can then configure the email settings and set email notifications on various items.
Example of the settings:
The settings that can be configured are:
Mail Server (SMTP Configuration)
TLS Options – can be set to None/Use TLS when available/Always use TLS
Host - mail server address
Port - mail server port
Username - mail server username if required
Password - mail server password if required
Sender - email address of the sender
Prefer text mails (checkbox) - The default mail format is HTML if the option is selected the mails are sent in text format
Note: Any port can be entered as the mail server port (Default: 25) and ReaQta Hive will accept that value. However, this does not mean the port is available, and it is recommended to avoid commonly used port numbers other than the default if one intends to use a different port value.
Host - mail server address
Port - mail server port
Username - mail server username if required
Password - mail server password if required
Sender - email address of the sender
Prefer text mails (checkbox) - The default mail format is HTML if the option is selected the mails are sent in text format
Note: Any port can be entered as the mail server port (Default: 25) and ReaQta Hive will accept that value. However, this does not mean the port is available, and it is recommended to avoid commonly used port numbers other than the default if one intends to use a different port value.
In the following section, you can select in-app notifications and email notifications:
Alerts
High severity
Medium severity
Low severity
Endpoints
Isolated
De-isolated
Registered
Deregistered
Isolated
De-isolated
Registered
Deregistered
Your Account
Trusted Device Added/Removed
Too Many Failed Login Attempts
Disabled Two-Factor Auth
Enabled Two-Factor Auth
Trusted Device Added/Removed
Too Many Failed Login Attempts
Disabled Two-Factor Auth
Enabled Two-Factor Auth
Other User Accounts
Too Many Failed Login Attempts
Disabled Two-Factor Auth
Enabled Two-Factor Auth
Too Many Failed Login Attempts
Disabled Two-Factor Auth
Enabled Two-Factor Auth
Installation
Two-Factor Auth Required
Two-Factor Auth Requirement Removed
License Expiration Notice
Two-Factor Auth Required
Two-Factor Auth Requirement Removed
License Expiration Notice
Policies
Policy Created
Policy Deleted
Policy Created
Policy Deleted
Reports
Report Available
Report Available
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSVOEH","label":"IBM Security ReaQta"},"ARM Category":[{"code":"a8m3p000000hBSKAA2","label":"Administrative Tasks-\u003EEmail"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Product Synonym
ReaQta
Was this topic helpful?
Document Information
Modified date:
17 May 2023
UID
ibm16564371