Skip to content
  • There are no suggestions because the search field is empty.

ESA email notifications are failing to send when an invalid subject template is selected

Issue

ESA is failing to send email notifications.  In the correlation-server.log you will see:
 
FTL stack trace ("~" means nesting-related):
    - Failed at: #if highAlarmsCount > 0  [in template "inline" at line 1, column 23]


Cause

The Event Source Monitoring default email subject template is not supported with ESA alerts.  highAlarmsCount is not defined within ESA.

Admin > System > Global Notifications > Output tab click + or select an existing email output to add or modify an email notification template:
 
Event

Resolution

When selecting the Subject* line for the output of an ESA email notification select Custom.

custom

Product Details

RSA Product Set: NetWitness Logs & Network
RSA Product/Service Type: Event Stream Analysis
RSA Version/Condition: 11.x

Summary

How to configure the subject line of an output email notification template for ESA.


Approval Reviewer Queue

RSA NetWitness Suite Approval Queue