4 Replies Latest reply on Mar 6, 2014 10:54 AM by esher72

    Remove "ESM Reports" from email subject line

    esher72

      This seems like it should be a simple matter of unchecking a box or something. Does anyone know of a way to remove the "ESM Reports" prefix that gets added to the subject line on every alert and report? I name mine such that I get a good idea what the email is based on the subject like Account Lockout - Domain Admin. Well on some devices like my phone, all I see is "ESM Reports - Acc" and the important piece gets truncated.

        • 1. Re: Remove "ESM Reports" from email subject line
          rth67

          Have not looked at Reports, but in the Alarm's you should be able to create Custom Alarm Templates to use and specify what is in the Subject Line as well as the body of the email.

          "Alarm Message Templates" became available in version 9.2.1

          • 2. Re: Remove "ESM Reports" from email subject line
            esher72

            I appreciate the response. Yeah I have done that and it still prepends my alarm emails with "ESM Reports -"

             

             

            I have this in my custom template for an alarm:

            Capture.PNG

             

            That yields this email subject:

            Capture2.PNG

            Obviously, I whited out the username in that. The idea would be to be able to tell what happened and to whom just from the subject. Then open it for more information. This is just an axample I threw together real quick. I get the same on all of my reports and all of my alarms. Since it is common across both, I almost wonder if it isn't a common setting on the ESM itself somehwere. I can tell by the from address that is is the ESM. I don't need to waste space in the subject line.

             

            We have had this SIEM since 2011 so I am at the point in my implemenation where I can whine about silly things like this.

            • 3. Re: Remove "ESM Reports" from email subject line
              rth67

              Think I found your issue, all of ours show "McAfee SIEM" which is defined under the ESM's "System Properties" then "Email Settings" and finally the "Title" field.

              Check to see if yours is set to "ESM Reports"

              • 4. Re: Remove "ESM Reports" from email subject line
                esher72

                That was it. Thank you. I knew it would end up being something embarrassing like that. Like I said, we have had ours since 2011. I configured those settings a l-o-n-g time ago. Common sense should have said to check the email settings tab though. Guess I just needed a fresh set of eyes on it. Thanks again!