Send notification to additional persons based on change in severity
A way to configure a notification rule to send to additional contacts when the severity status changes without creating a new analysis.
Customer use case:
Customer wants to scan devices. If a device fails to respond (I/O Timeout) over a short period of time, the event frame Severity is set to Warning and a notification is sent to IT. If the device remains offline for an extended period of time a child event frame is created and severity changes to major. When this occurs the customer would like additional people to be notified so they can go investigate the issue.
Workaround is to make a second analysis but users may prefer to keep it all under the same analysis.