Skip to content

Configure the EmailerToAddr Notifier#

manageConfig

Configure the EmailerToAddr notifier in TheHive.

Notifier availability

The EmailerToAddr notifier is available only when you turn off the Send notification to every user in the organization toggle and use one of the following triggers:

  • AnyEvent
  • FilteredEvent
  • CaseClosed
  • CaseCreated
  • CaseFlagged
  • CaseShared
  • AlertClosed
  • AlertCreated
  • AlertImported
  • TaskClosed
  • TaskMandatory

SMTP configuration required

Configuring EmailerToUsers and EmailertoAddr notifiers requires setting up SMTP beforehand.

Procedure

  1. Go to the Organization view from the sidebar menu.

    Organization view

  2. Select the Notifications tab.

    Notifications tab

  3. Select and then Edit.

  4. Select the EmailerToAddr notifier.

  5. In the EmailerToAddr drawer, enter the following information:

    - Subject

    The email subject line.

    - From

    The sender's email address.

    - To

    The recipient's email address.

    - Template

    The email template used for the message. If you select the HTML format, you must write the full HTML syntax.

    Available variables

    You can use variables in certain fields by selecting Add variable. Refer to the Variable Usage Examples topic for detailed examples.

    Helpers using Mustache syntax

    Data transformation helpers#

    Helper Description Usage Output
    tlpLabel Format the tlp field of the object {{ tlpLabel object.tlp }} Amber
    papLabel Format the pap field of the object {{ papLabel object.pap }} Amber
    severityLabel Format the severity field of the object {{ severityLabel object.severity }} Critical
    dateFormat Format a date field of the object using Java date time patterns {{dateFormat audit._createdAt "EEEEE dd MMMMM yyyy" "fr" }} jeudi 01 septembre 2022

    Standard string helpers can be found in the official Handlebars documentation.

    Conditional helpers#

    Examples:

    • Displays Medium if case.severity equals 2, otherwise displays Other:
    {{#if (eq case.severity 2) }}
    Medium
{{else}}
    Other 
{{/if}}
    • Displays the threat actor value only if case.customFieldValues.threat-actor is defined:
    {{#if case.customFieldValues.threat-actor}}
    Threat Actor: {{case.customFieldValues.threat-actor}}
{{/if}}

    Find additional supported operators in the official Handlebars documentation.

  6. Select Confirm.

Next steps