Help Center/ SecMaster/ User Guide/ Playbook Overview/ Auto Notification of Unclosed Alerts (Alerts statistics Notify)
Updated on 2026-02-06 GMT+08:00
View PDF
Share

Auto Notification of Unclosed Alerts (Alerts statistics Notify)

Playbook Overview

The Alerts statistics Notify playbook has been matched with the Alerts statistics Notify workflow. This workflow automatically collects statistics on unclosed SecMaster alerts at 19:00 every day and notifies you by email or SMS message.

This playbook is enabled by default. There is no need to manually configure or enable it.

Prerequisites

  • SecMaster has obtained the SMN FullAccess permission, which specifies all permissions of SMN.
    Table 1 Description

    Permission

    Description

    Principal

    Usage

    SMN FullAccess

    All permissions for SMN.

    SecMaster_Agency

    SecMaster uses SMN to send playbook execution notifications.

    Perform the following steps to check whether SecMaster has obtained the SMN FullAccess permission: If the permission is not allocated, allocate it to SecMaster by referring to Authorizing SecMaster.

    1. Log in to the SecMaster console as an administrator.
    2. Click in the upper left corner of the page and choose Management & Governance > Identity and Access Management.
    3. In the navigation pane on the left, choose Agencies. On the Agencies page, click SecMaster_Agency and then click the Permissions tab to view all authorization records of SecMaster_Agency.
    Figure 1 Viewing Agency Authorization Records

Limitations and Constraints

  • Your SecMaster professional edition is available.

Step 1: Create and Subscribe to a Topic

The Attack link analysis alert notification workflow needs to use Simple Message Notification (SMN) to create and subscribe to a notification topic.
  1. Log in to the SecMaster console.
  2. In the upper left corner of the page, click and choose Management & Governance > Simple Message Notification.
  3. Create a topic.
    1. In the navigation pane on the left, choose Topic Management > Topics. In the upper right corner of the displayed page, click Create Topic.
      Figure 2 Create Topic
    2. In the Create Topic dialog box displayed, configure topic information and click OK.
      • Topic Name: Set it to SecMaster-Notification.
      • Display Name: SecMaster notification topic is recommended.
      • Retain the default settings for other parameters.

      Topic Name must be to SecMaster-Notification, or playbooks may fail to be executed.

  4. Add a subscription.
    1. On the Topics page, locate the row that contains the SecMaster-Notification topic and click Add Subscription in the Operation column.
    2. On the displayed Add Subscription slide-out panel, configure subscription information and click OK.
      • Protocol: Select Email.
      • Endpoint: Enter the email address of the subscription endpoint, for example, username@example.com.
  5. Confirm the subscription.

    After a subscription is added, a confirmation email will be sent to the email address set in 4. Click the subscription confirmation link in the email. A page for a successful subscription will be displayed.

Implementation Effect

The Alerts statistics Notify playbook automatically collects statistics on unclosed alerts in SecMaster at 19:00 every day and notifies you by email or SMS. The following is an example notification.

Figure 3 Alert handling notification email

Parent topic: Playbook Overview