Open

You will learn

How to create and edit email reports, add recipients, and manage report scheduling.

Prerequisites

Audience: IT Professional, or End User
Difficulty: Basic
Time needed: Approximately 10 minutes
Tools required: N/A

Create Email Reports

1. To configure a scheduled email report click on Global from the Navigation sidebar, then click on Administration and select the Email Reports page. Since there are no default Email Reports in ThreadFix, the initial landing page will have no listings.
   
   

   Open

   

2. Click the New Scheduled Email Report button. This will display a modal dialog.
   
   

3. Choose the team concerned, the severity threshold that will trigger an email notification, report frequency, and time the system should send the report. Click the Create Scheduled Email Report button to save the entry.
   
   

    

4. A success message displays and the new scheduled email report will be added to the schedule list.
   
   

Adding Recipients

1. To add recipients to a scheduled report, click the Show/Hide button in the schedule entry. This changes the view, adding fields for single email addresses and a drop-down menu of email lists created.
   
   

    

2. Entries can be added individually in the left text field. Type a valid email address and click the Add Email button. The address is then added to the Email Address column.
   
   

3. To schedule the report to be sent to an email list, choose from the drop-down list on the right. This menu shows available ThreadFix email lists. Instructions on how to create email lists can be found in the Creating Email Lists guide. Select the desired email distribution list and click the Add List button. The list is now added to the group of email lists.
   
   

Edit and Delete Schedules

1. To edit or delete a schedule, click the Edit/Delete button in the row of the schedule.
   
   

    

2. This will bring up a modal dialog like the schedule creation dialog, but with a Delete button added. Edit the scheduled email report if necessary and click the Save Edits button. The change in the scheduled report will be visible immediately.
   
   

    

3. To instead delete the scheduled report, click the Delete button, which prompts for a confirmation before deletion. After confirming, a success message displays and the entry will be missing from the Scheduled Email Reports list.
   
   

Report Generation

Email reports will be generated only when the openTime of the vulnerability is greater ( > ) than the target date, has a severity that is equal to or greater than ( >= ) the configured severity, and is associated with the configured Team(s). The target date is calculated differently based on Selected vs Cron.

Selected: If the frequency is daily, the target date will be the previous today from the day the job is run (today - 1). If the frequency is weekly, the target date will be seven days before (today - 7). The minute and hour will be gathered from the selected minute and hour, while the seconds and milliseconds of the time will be set to 0 for each.

Cron: Cron will always generate a weekly target date as described above (no matter how the Cron job is configured).
The report will only be sent out if vulnerabilities are retrieved from the criteria above and the job has emails that have passed the filter setup during the email configuration.

Table of Contents