Open

You will learn

How to create and edit email reports, add recipients, and manage report scheduling.

Prerequisites

Audience: IT Professional or End User
Difficulty: Basic
Time needed: Approximately 10 minutes
Tools required: N/A

Create Email Reports

1. To configure a scheduled email report click on Global from the Navigation sidebar, then click on Administration and select the Email Reports page. There are no default Email Reports in ThreadFix, so the initial landing page will have no listings.
   
   

   Open

   

2. Click the New Scheduled Email Report button. This will display a modal dialog.
   
   

    

3. Choose the team concerned, the severity threshold that will trigger an email notification, the report frequency, and the time that the system should send the report. Click the Create Scheduled Email Report button to save your entry.

You will see a success message displayed, and your new scheduled email report will be added to the schedule list.

Adding Recipients

1. To add recipients to your scheduled report, click the Show/Hide button in your schedule entry. This changes the view, adding fields for single email addresses and a dropdown menu of email lists you have created.
   
   

2. You can add entries individually in the left text field. Type in a valid email address, and click the Add Email button. Your address is added to the Email Address column.
   
   

3. To schedule your report to be sent to an email list, choose from the dropdown on the right. This is a menu of available ThreadFix email lists. Instructions on how to create email lists and other details can be found in the chapter Creating Email Lists. Select your desired email list and click the Add List button. Your list is added to the group of email lists.
   
   

Edit and Delete Schedules

1. To edit or delete a schedule, click the Edit/Delete button in the row of the schedule.
   
   

2. This will bring up a modal dialog like the schedule creation dialog, but with a Delete button added. You can edit your scheduled email report, and then click the Save Edits button. The change in your scheduled report will be visible immediately.
   
   

3. To delete the scheduled report, click the Delete button. You will be prompted to confirm the deletion.
   
   

4. After confirming, you will see a success message and your entry will be missing from the Scheduled Email Reports list.
   
   

Report Generation

Email reports will be generated only when the openTime of the vulnerability is greater ( > ) than the target date, has a severity that is equal to or greater than ( >= ) the configured severity, and is associated with the configured Team(s).
The target date is calculated differently based on selected vs cron.

Selected:

If the frequency is daily, the target date will be the previous today from the day the job is run (today - 1). If the frequency is weekly, the target date will be seven days before (today - 7). The minute and hour will be gathered from the selected minute and hour, while the seconds and milliseconds of the time will be set to 0 for each.

Cron:

Cron will always generate a weekly target date as described above (no matter how the cron job is configured). The report will only be sent out if vulnerabilities are retrieved from the criteria above and the job has emails that have passed the filter setup during the email configuration.

Table of Contents