Prisma Cloud no longer shows the alert for which the notification email was generated
2372
Created On 10/24/24 18:59 PM - Last Modified 02/19/25 17:58 PM
Question
- Why are customer's unable to find the alert when clicking on the open alert hyperlink in the email integration notification?
Environment
- Prisma Cloud Enterprise Edition
- Cloud Security
- Alerts
- Notification
- Email Integration
- Notification
- Alerts
- Cloud Security
Answer
- This happens when the cloud account for which the alert was generated is disabled
- On Alerts page, Prisma Cloud does not show alerts for disabled cloud accounts.
Additional Information
- How does alert hyperlinks in email notifications redirect to the alert overview page with different filters applied?
- When the customer received an email notification, it will contain two links: one at the top and one at the bottom.
- The top link points to the updated alerts + with open status + for that particular time range + for that particular alert rule + for the particular cloud account .
- The bottom link points to the updated alerts + with open status + for that particular time range + for that particular alert rule + for the particular policy + for the particular cloud account.
- The customer receives email for the open alerts notification, though by the time customer addresses the email and clicks on the links, if the alert status has changed (alert is not “Open” anymore), the alerts would not be shown as they do not fit the filter criteria anymore.
- As per the expected behavior and functionality of the email notification ,once user clicks on the link from email, the filters mentioned in the link are applied and shown on UI.
- When cloud account is disabled the cloud.account filter condition was not applied and thus for the top link (which does not have policy name filter), we might see alert for another policy for different cloud account.
- Similarly, directly on Alerts UI page, customer may not find this alert as the cloud account is disabled.