Add email addresses for alert notifications
Enterprise Threat Protector super administrators can enter email addresses of users receiving alert notifications. You can provide these email addresses on the Communication page or in a specific field on the Policies page. This procedure describes how to add email addresses on the Policies page.
When a new alert is detected, those who are configured to receive alert notifications are sent notifications at near real-time. If more alerts occur within a five minute period, the user is notified about these alerts after the five minutes. Data in email notifications are organized by domain. If an alert is detected in multiple locations, alert information is also organized by location. The email also contains other important alert information, such as the associated policy, list, and the action taken on the alert.