MSP Alert Templates

The MSP administrator can configure MSP alert template to monitor Nebula Devices for unexpected events (for example, online / offline events). This screen will list the alert templates you have created. See Alert Settings for details on creating an alert template.

To access this screen, click MSP cross-org > MSP cross-org manage > Alert templates in the navigation panel.

MSP cross-org > MSP cross-org manage > Alert templates

The following table describes the labels in this screen.

MSP cross-org > MSP cross-org manage > Alert templates
Label	Description
+ Create	Click this button to add a new alert template (see Alert Settings).
Delete	Click this button to remove alert templates already created.
Search	Specify your desired search criteria to filter the list of alerts.
selected in	This shows the number of alerts that match your filter criteria after you perform a search.
Template	This shows the number of alert templates you have created.
Name	This shows a descriptive name of the alert template.
Description	This shows more details on the alert template.
Creator	This shows your email address.
Bound organizations	This shows All organizations or a list of the selected organizations to send alerts to.
Exclude sites	This shows the sites that will not receive any alerts.
Enable	Click this to activate the alert template.
To edit the Name, Description, Creator, Bound organizations, and Exclude sites fields, just click the field and the Update alert screen will appear.

Alert Settings

Use this screen to set which alerts are created and emailed, and set the email addresses to which an alert is sent. Click MSP cross-org > MSP cross-org manage > Alert templates > Create to access this screen.

NCC’s Smart Alert Engine uses knowledge of network topology and cross-device functionality to only generate alerts for unexpected events. This helps avoids unnecessary emails and notifications.
For example, an AP is receiving power from a PoE switch. If the AP loses power because its Ethernet cable is disconnected, NCC generates an alert. If the AP loses power because the switch has a PoE schedule that disables power to the AP, NCC does not generate an alert.

MSP cross-org > MSP cross-org manage > Alert templates > Create/Update alert

The following table describes the labels in this screen.

MSP cross-org > MSP cross-org manage > Alert templates > Create/Update alert
Label	Description
General
Template name	Enter a descriptive name for the alert template (up to 64 alphanumeric characters including spaces).
Description	Enter more details of the alert template (up to 64 alphanumeric characters including spaces).
Email recipient	Enter the email addresses to which you want to send alerts. Recipients belonging to Base organizations will not receive email alerts, except if the recipient’s account includes an MSP license. In general, only the organizations with activated MSP license will receive email alerts. For example, ORG 1 is a Base tier organization, and ORG 2 is a Professional tier organization. An MSP alert template is created to monitor AP offline events. If there are three email recipients in both ORG 1 and ORG 2 with the following licenses: • REP 1 (recipient 1) has an account which includes an MSP license. • REP 2 (recipient 2)and REP 3 (recipient 3) has accounts which does not include an MSP license. When an AP offline event occurs, an email alert will only be sent to REP 1 in ORG 1. While an email alert will be sent to all recipients (REP 1, REP 2, and REP 3) in ORG 2.
Apply to	Select All organizations or specify the selected organizations to send alerts to.
Exclude sites	Select the sites in organizations that will not receive any alerts.
Enable	Click this to activate the alert template.
System alerts
Notification Type	For each alert, you can set how to receive alert notifications: • Email: Alert notifications are sent by email to configured recipients. • In-app Push: Alert notifications are sent to site administrators who are logged into the Nebula Mobile app. This type of notification is not available for some features. • Both: Alert notifications are sent by email and app notification. • Disabled: No alerts are sent.
Show additional recipients	Add additional user accounts who will receive email and in-app notifications for the alert.
System Alerts
Wireless	Specify how long in minutes the NCC waits before generating and sending an alert when an access point goes offline.
Switches	Specify how long in minutes the NCC waits before generating and sending an alert when a port or a switch goes offline.
Security gateway	Specify how long in minutes the NCC waits before generating and sending an alert when the following events occur: • A gateway device goes offline. • Any DHCP pool on the gateway device runs out of IP addresses to assign. • A VPN connection to or from the gateway device is created or terminated. • The WAN connectivity goes offline.
Mobile router	Specify how long in minutes the NCC waits before generating and sending an alert when an mobile router goes offline.
Other	Specify whether to send an alert each time configuration settings are changed.
Security alerts
CDR containment	Specify whether to send an alert each time a CDR block or containment action is triggered.
Show additional recipients	Add additional user accounts who will receive email and in-app notifications for the alert.
SecuReporter
Notification mode	Select whether to receive email security reports from SecuReporter.
Show additional recipients	Add additional user accounts who will receive email and in-app notifications for the alert.
Email subject	Enter an email title here.
Email description	Enter a description of the emails to be sent here. For example, maybe these emails are just for high severity events.
Notification interval	Specify how often to receive a SecuReporter report. If no security events were triggered, SecuReporter will not send a report.
Event severity	Select the severity level of events that will be included in each report.
Event threshold	This table lists the events that trigger SecuReporter security alerts. You can set the alert threshold. For example, X count(s) of malware/virus attack within 5 minutes means SecuReporter includes a report in the email if the total number of combined malware and virus detection events exceed X within a 5 minute time period.