Schedule Alerts and Configure Additional Options
Analysts can schedule an alert to be published at a specific time and date. You can also schedule alert expiry, repetition, export and other details. Use the following sections to know more about all the alert scheduling options in Finish > Additional Options in the alert creation form.
Before you Start
Add required details to the alert such as alert title, description, TLP, and category.
Add recipients to the alert.
Steps
To schedule an alert for publishing, do the following:
In the alert creation form, click Finish.
Select Additional Options. Use the following information while configuring additional options:
Schedule this alert to be published on a specific date/time: Select the checkbox to set a date and time for publishing the alert
Self-Destruct this alert from user's devices and from the server: Select the checkbox to self-destruct an alert after a specific time. You cannot select this checkbox if you have selected the checkbox to expire the alert. This will remove the alert from CSAP Member Portal and Cyware Enterprise mobile app. For example, if the alert information is going to be redundant after a time period, you can choose to self-destruct the alert.
In the Analyst Portal, the alerts display page shows the alert with the title Self Destructed. You can no longer view alert details such as summary, category and other alert details. However, you can still view details like the date and time of self-destruction.
Schedule this alert to be expired on a specific date/time: Select the checkbox to expire the alert after a specific time. You cannot select this checkbox if you have previously selected the checkbox to self-destruct the alert. After an alert is expired, it cannot be edited or published. Analysts can view it as an expired alert, but the alert is deleted in the Member Portal. Unlike a Self Destructed alert, you can still see all details of an expired alert such as summary, category and other details in the Analyst Portal. To know more about expired alerts, see Expire Alerts.
Repeat this alert multiple times: Select the checkbox to repeat the alert between specified intervals. You cannot select this checkbox if you have previously selected the checkbox to self-destruct the alert.
Allow Recipients to Export This Alert: Select the checkbox to allow members to export this alert for offline analysis.
Allow Export as PDF: Select the checkbox to export the alert as a PDF for offline analysis.
Send Email to Publisher: Select the checkbox to send an email of the published alert to the publisher. By default, this option is mapped to TLP Controls > Send Email to Publisher in Alert Settings. To configure this setting in TLP Controls, see Alert Settings.
Note
In TLP Controls, for each TLP, the administrator can choose if an email notification is sent to publishers. Your selection in the Finish section overrides the selection defined in TLP Controls.
After adding details, click Publish. After an alert is scheduled for publishing, analysts can change the publish time by clicking the alert on the Alerts page. This allows publishers to change the schedule of the alert if the intel shared in the alert needs to be communicated at a different time.