Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. IT Analytics Help
  3. Section IV. End user
  4. Alert configuration
  5. Edit notifications for Report-Based Alerts

Edit notifications for Report-Based Alerts

For convenience, your reports with an alert configured are displayed in this section of the Alerts tab and you can edit how you are notified of the alert.

  1. Select Alerts > Alert Configuration > Report-Based Alerts. A list of tabular reports with an alert configured are displayed.

  2. Select a report and click Edit.

  3. Modify the schedule and notification method using the following fields:

Check for alerts/Schedule

The following options are displayed in the drop-down list:

  • On a defined schedule- Primary schedules can be configured and then applied to reports. Modifications to a primary schedule will automatically be applied to all the reports associated with that primary schedule.

    See Configure primary schedules.

  • Frequency in Minutes - Select from every 5, 15, or 30 minutes.

  • Hourly - Select 1, 2, 3, 4, 6, or 12 hours.

  • Daily - At: hour/minute. Select a specific time.

  • Weekly

    • On every. The day(s) on which the report will be checked.

    • At: hour/minute. Select a specific time.

  • Monthly

    • On the. The day on which the report will be checked.

    • At: hour/minute. Select a specific time.

The Portal can check the same report multiple times in a single day.

  • Cron Expression - Enter a CRON expression to fine tune the alert schedule.

    See CRON expressions for policy probe schedules.

    for details about working with CRON expressions.

Run Status

Select Enabled or Disabled. This selection enables or disables the schedule for the report to be checked for alerts.

Email

Check the box and provide a comma-separated list of email addresses. One email will be sent for the entire report.

Subject

Enter the subject. The report name is used if the field is left blank.

Script

The user-created script needs to reside in:

/opt//portal/user_scripts

Check the box and enter a shell script name (Linux). If a path name is included, it will be appended to the above path.

For example, filter a report to include only the columns of information that you need. When the alert is triggered, a .csv file of the report is generated and the path to that file is made available to the script to take whatever actions you want with this report data.

Administrators: To enable Script delivery refer to the following section.

See Add/Configure a domain.

SNMP

When you check this box, the Port, Community string, and Management servers fields will be populated from the configured defaults. One alert is sent for each row. To override the defaults, overwrite any or all of the three SNMP fields.

Administrators: To enable SNMP delivery and to configure SNMP default values refer to the following.

See Add/Configure a domain.

Native Log

When this box is checked, a log entry is written to the OS-specific log: either the Windows event log or the Linux syslog.

Administrators: To enable Native Log delivery refer to the following section.

See Add/Configure a domain.

Syslog

When this box is checked, alert notifications are routed through the Syslog configuration specified from the Syslog list.

See Syslog configuration.

Feedback

Was this page helpful?
Previous

Report-Based alerts

Next

Run a Report-Based Alert On-Demand

Feedback

Was this page helpful?