Security Compliance

Set automatic email notifications for scheduled reports in SEM

SolarWinds does not support automatically emailing scheduled reports due to the size of the common and recommended scheduled reports.

First published date

11/29/2018 10:35 PM

Last published date

1/5/2022 3:32 PM

Overview

SolarWinds does not support automatically emailing scheduled reports due to the size of the common and recommended scheduled reports. This article discusses an alternative by scheduling the reports to export to a network share and configure a Security Event Manager (formerly Log & Event Manager) rule to send an email notification when the reports are finished.
 

Product section

Security Event Manager

Resolution

Schedule the reports 

 
  1. Open the SEM reports application.
  2. Select the report you want to schedule.
  3. Click Schedule.
  4. Click Add.
  5. Enter a name for your new task in the Task Description field, and then click OK.
  6. Click the Schedule tab.
  7. Click New, and then set the frequency and start time for your task.
  8. If you are finished configuring your task, click OK.
  9. Enter and confirm the password for the user you want Windows Task Scheduler to use to execute the task.
  10. On the Report Scheduler Tasks window, select the task you just created, and then click Load to View or Edit.
  11. Select the data source, date range, and export preferences in the lower pane, and then click Save.
  12. If you are finished configuring your Report Scheduler tasks, click Close.

Create an Email Template 

Create an Email Template in the Configure > Email templates area of your SEM console. SolarWinds recommends the following parameters in your template:

  • EventInfo
  • DetectionTime
  • ExtraneousInfo

Notes:

  • The ExtraneousInfo field contains the file path of the report template and export location, if applicable. Use the latter to locate your exported scheduled reports.
  • For additional information about creating Email Templates, see Creating a Custom Email Template.

Configure a SEM rule 

  1. Create a new rule in the Rules > Create new rule area of your SEM console with one or more of the following correlations:
    • Use InternalInfo.EventInfo = *Report Completed* to fire the rule for any report, regardless of whether or not they are scheduled or run manually.
    • Use InternalInfo.EventInfo = *"Report Title" Report Completed* to specify a single report, where Report Title is the exact name of the report as it appears in LEM Reports.
    • Use InternalInfo.DetectionIP = IP Address of Scheduled Reports Computerto limit the rule to fire only for reports that are run on a specific computer.
    • Use InternalInfo.DetectionTime Contains Scheduled Reports Time of Day Set with a custom Time of Day Set to encompass the times during which you expect your scheduled reports to run. Click for more information about creating Time of Day Sets.
  2. Add the Send Email Message action to your rule and configure the action using the Email Template you created above and specify the users you want to notify of this type of event. For more information on creating rules, see Creating Rules from Your SEM Console to monitor and respond to events .
  3. Enable, save, and then activate your new rule.