MSP Alert Templates
The MSP administrator can configure MSP alert template to monitor Nebula Devices for unexpected events (for example, online / offline events). This screen will list the alert templates you have created. See Alert Settings for details on creating an alert template.
To access this screen, click MSP cross-org > MSP cross-org manage > Alert templates in the navigation panel.
MSP cross-org > MSP cross-org manage > Alert templates
The following table describes the labels in this screen.
MSP cross-org > MSP cross-org manage > Alert templates 
Label
Description
+ Create
Click this button to add a new alert template (see Alert Settings).
Delete
Click this button to remove alert templates already created.
Search
Specify your desired search criteria to filter the list of alerts.
selected in
This shows the number of alerts that match your filter criteria after you perform a search.
Template
This shows the number of alert templates you have created.
Name
This shows a descriptive name of the alert template.
Description
This shows more details on the alert template.
Creator
This shows your email address.
Bound organizations
This shows All organizations or a list of the selected organizations to send alerts to.
Exclude sites
This shows the sites that will not receive any alerts.
Enable
Click this to activate the alert template.
*To edit the Name, Description, Creator, Bound organizations, and Exclude sites fields, just click the field and the Update alert screen will appear.
Alert Settings
Use this screen to set which alerts are created and emailed, and set the email addresses to which an alert is sent. Click MSP cross-org > MSP cross-org manage > Alert templates > Create to access this screen.
*NCC’s Smart Alert Engine uses knowledge of network topology and cross-device functionality to only generate alerts for unexpected events. This helps avoids unnecessary emails and notifications.
For example, an AP is receiving power from a PoE switch. If the AP loses power because its Ethernet cable is disconnected, NCC generates an alert. If the AP loses power because the switch has a PoE schedule that disables power to the AP, NCC does not generate an alert.
MSP cross-org > MSP cross-org manage > Alert templates > Create/Update alert
The following table describes the labels in this screen.
MSP cross-org > MSP cross-org manage > Alert templates > Create/Update alert 
Label
Description
General
Template name
Enter a descriptive name for the alert template (up to 64 alphanumeric characters including spaces).
Description
Enter more details of the alert template (up to 64 alphanumeric characters including spaces).
Email recipient
Enter the email addresses to which you want to send alerts.
*Recipients belonging to Base organizations will not receive email alerts, except if the recipient’s account includes an MSP license. In general, only the organizations with activated MSP license will receive email alerts.
For example, ORG 1 is a Base tier organization, and ORG 2 is a Professional tier organization. An MSP alert template is created to monitor AP offline events. If there are three email recipients in both ORG 1 and ORG 2 with the following licenses:
REP 1 (recipient 1) has an account which includes an MSP license.
REP 2 (recipient 2)and REP 3 (recipient 3) has accounts which does not include an MSP license.
When an AP offline event occurs, an email alert will only be sent to REP 1 in ORG 1. While an email alert will be sent to all recipients (REP 1, REP 2, and REP 3) in ORG 2.
Apply to
Select All organizations or specify the selected organizations to send alerts to.
Exclude sites
Select the sites in organizations that will not receive any alerts.
Enable
Click this to activate the alert template.
System alerts
Notification Type
For each alert, you can set how to receive alert notifications:
Email: Alert notifications are sent by email to configured recipients.
In-app Push: Alert notifications are sent to site administrators who are logged into the Nebula Mobile app. This type of notification is not available for some features.
Both: Alert notifications are sent by email and app notification.
Disabled: No alerts are sent.
Show additional recipients
Add additional user accounts who will receive email and in-app notifications for the alert.
System Alerts
Wireless
Specify how long in minutes the NCC waits before generating and sending an alert when an access point goes offline.
Switches
Specify how long in minutes the NCC waits before generating and sending an alert when a port or a switch goes offline.
Security gateway
Specify how long in minutes the NCC waits before generating and sending an alert when the following events occur:
A gateway device goes offline.
Any DHCP pool on the gateway device runs out of IP addresses to assign.
A VPN connection to or from the gateway device is created or terminated.
The WAN connectivity goes offline.
Mobile router
Specify how long in minutes the NCC waits before generating and sending an alert when an mobile router goes offline.
Other
Specify whether to send an alert each time configuration settings are changed.
Security alerts
CDR containment
Specify whether to send an alert each time a CDR block or containment action is triggered.
Show additional recipients
Add additional user accounts who will receive email and in-app notifications for the alert.
Security Report
Notification mode
Select whether to receive email security reports from SecuReporter.
Show additional recipients
Add additional user accounts who will receive email and in-app notifications for the alert.
Email subject
Enter an email title here.
Email description
Enter a description of the emails to be sent here. For example, maybe these emails are just for high severity events.
Notification interval
Specify how often to receive a SecuReporter report.
If no security events were triggered, SecuReporter will not send a report.
Event severity
Select the severity level of events that will be included in each report.
Event threshold
This table lists the events that trigger SecuReporter security alerts.
You can set the alert threshold. For example, X count(s) of malware/virus attack within 5 minutes means SecuReporter includes a report in the email if the total number of combined malware and virus detection events exceed X within a 5 minute time period.