Ideas

Adding examples to the original post, email notifications when:
- if device [last seen] > x days ago
- If device [THREAT DEFINITIONS] = Out of date
- If device [STATUS] = Updates Failed | xxxx
- If device [AGENT] = Out of date

Hi David,

I appreciate the response. It's not spamming if I control which notifications I want to receive via email. The reporting feature is not comparable to notifications, as it requires me to proactively log in to see the reports. I want to be able to setup a "if this happens, then send me a notification" type of notification, just like the threat notification but for other scenarios. I am managing almost 200 seats and I don't want to have to log in and run reports. I want to know if somethings specific happens and then I can choose whether I want to investigate it further. Many other major competitors have the ability to set up comprehensive and custom notifications. BTW, I rarely, if ever, use the reporting function. These types of notifications would be used consitently.

Hello Avi,

So the notifications to which you refer are the emailed notifications, and are generally designed to cover only a few critical use cases - we don't want to be spamming you all the time. That said, if there is general interest in expanding the set of notifications, we can certainly do so.

That said, we'd expect you to use the "Reports" tab more typically to find audit-trail type information like you describe. The 'Device Registration Report" in particular contains the info you are looking for w.r.t. agent installs. We don't currently report on uninstalls, but we could add that one if it is of interest.

Note that reports under the Reports tab are designed to be very interactive, with faceted filtering and drill-down data exploration. Partly for this reason, delivering those same reports over a static medium such as email would present a much less compelling experience. It is for this reason that we reserve the email notifications to just a couple high-level summaries, and then a few "please react to this right now" type notifications.

So I would put it to the group: do you think we should reserve the email notifications for actual notifications, i.e. "take action now" type stuff (aside from the two digests)? Or is there general interest in receiving some or all of the more audit-trail type Reports also as some kind of scheduled job? What would you do with this latter kind of emailed report, that you can't do by simply visiting that report in the console?

Let us know in the comments, thanks!