Kaspersky Unified Monitoring and Analysis Platform

KUMA notifications

Standard notifications

KUMA can be configured to send email notifications using an SMTP server. To do so, configure a connection to an SMTP server and select the Receive email notifications check box. Only a user with the General administrator role can receive email notifications.

If the Receive email notifications check box is selected for a user with the General administrator role, after enabling the setting, an email notification is sent to the user every 6 hours in accordance with the following rule:

• If at least one server has a non-empty Warning field at the time scheduled for sending the message, the message is sent.
• One message is sent for all services with the yellow status. If no services have the yellow status, no message is sent.

The 6-hour interval is respected unless the KUMA Core is restarted. After each restart of the Core, the 6-hour interval is reset.

KUMA automatically notifies users about the following events:

• A report was created (the users listed in the report template receive a notification).
• An alert was created (all users receive a notification).
• An alert was assigned to a user (the user to whom the alert was assigned receives a notification).
• A task was performed (the users who created the task receive a notification).
• New resource packages are available. They can be obtained by updating the KUMA repository (the users whose email address is specified in the task settings are notified).
• The daily average EPS has exceeded the limit set by the license.
• The hourly average EPS has exceeded the limit set by the SMB license.

Custom notifications

Instead of the standard KUMA notifications about the alert generation, you can send notifications based on custom templates. To configure custom notifications instead of standard notifications, take the following steps:

• Create an email template.
• Create a notification rule that specifies the correlation rules and email addresses.

When an alert is created based on the selected correlation rules, notifications created based on custom email templates will be sent to the specified email addresses. Standard KUMA notifications about the same event will not be sent to the specified addresses.