Forum Discussion

Max Boella's avatar
Max Boella
Copper Contributor
Apr 26, 2019

MCAS SIEM agent status reporting

Hi. Is there a way to have MCAS generate an alert or email to indicate SIEM agent status change from "connected" to "disconnected". For example if the agent goes into disconnected or error state for ...
Cloud App Security
Max Boella's avatar
Max Boella
Copper Contributor
Apr 29, 2019

Thanks - will give this a test. I take it there is no way to centrally define that these SIEM agent type "system alerts" can be eg. sent to a specified separate operations email address instead of the email of the admin who just happens to have enabled the system notification emails ?

Dima Donhin's avatar
Dima Donhin
Icon for Microsoft rankMicrosoft
Apr 29, 2019
Not right now but its on our roadmap to add.