Skip to main content

Create Subscriptions

Subscriptions let you receive Netwrix Auditor overview and SSRS reports, search results, behavior anomaly dashboards, and risk assessment overviews on a scheduled basis — delivered by email or saved to a file share. Use subscriptions to stay informed about activity in your environment without logging into the product.

Prerequisites​

You must have the Global administrator or Global reviewer role in the product. For details, see Role-Based Access and Delegation.

Procedure​

  1. Do one of the following depending on subscription type:

    • Subscribe to an Overview or SSRS report — You can create an Overview or SSRS report subscription in one of the following ways:
      • From the Reports page: on the main Auditor page, navigate to Reports. Specify the report you want to subscribe to and click Subscribe.
      • From the report view: open the report and click Subscribe.
    • Subscribe to Search — You can create a Search subscription in one of the following ways:
      • From the search results page (you must first perform a search): navigate to Tools and select Subscribe.
      • From a predefined or user-saved search report: on the main Auditor page, navigate to Reports. Specify the Search report you want to subscribe to and click Subscribe.
    • Subscribe to Behavior Anomalies — On the main Auditor page, navigate to Behavior anomalies, then in the dashboard window click Subscribe.
    • Subscribe to Risks — On the main Auditor page, navigate to Risk assessment and in the dashboard window click Subscribe.

  2. On the Add Subscription page, complete the following fields:

    OptionDescription
    General
    Subscription nameEnter the name for the subscription.
    Report nameFor Overview or SSRS report subscriptions only. Displays the report name. You can't edit this field.
    Email subjectSpecify the email subject to identify subscription emails from Auditor. For example, "Successful read attempts on important file shares".
    Send empty subscriptions when no activity occurredSlide the switch to Yes to receive a subscription even if no activity occurred. Not available for Risks subscriptions.
    File formatSelect the format for delivered files. Available options depend on the subscription type: Search or Behavior Anomalies subscriptions: PDF or CSV. SSRS report subscriptions: PDF, DOCX, CSV, or XLS. Overview and Risks subscriptions: not displayed. These subscription types always use PDF format.
    File deliverySelect the delivery method: - Attach to email — Receive data as email attachments. The maximum attachment size is 50 MB. Attachments larger than 50 MB upload to \<NAservername>\Netwrix_Auditor_Subscriptions$\LostAndFound on the Netwrix Auditor server and remain available for 7 days. Check the subscription email to retrieve the files. - Upload to a file share — Save data to a shared folder. Click Browse to select a folder on the computer that hosts Auditor Server, or specify a UNC path to a shared network resource. Ensure that recipients have sufficient access rights and that the Long-Term Archive service account has sufficient rights to upload reports. For details, see File-Based Repository for Long-Term Archive. NOTE: ensure that the AD Computer account for the Auditor host server also has read access on the file share where you upload the Subscriptions.
    Other tabs
    RecipientsShows the number of selected recipients. Expand the Recipients list and click Add to add more recipients and specify email addresses.
    ScheduleLets you specify the delivery schedule: daily, certain days of the week, or a certain day of a certain month. By default, SSRS subscriptions start generating at 8:00 AM and all other subscription types start generating at 7:00 AM. To change the generation start time, see Review and Manage Subscriptions.
    FiltersAvailable filters depend on the subscription type. - For SSRS and Overview subscriptions — specify the report filters, which vary depending on the selected report. - For Risks subscriptions — select one or several monitoring plans and risk categories to include. By default, you receive data on all risk categories from all monitoring plans configured for risk assessment. - For Search subscriptions — specify filters the same way as for search. For details, see Use Filters in Advanced Mode. You can also select a parameter to sort actions by and the sorting order. - For Behavior Anomalies subscriptions — select the Timeframe: 7 or 30 days.
    HistoryContains subscription generation details (intervals, status, last run time, start type). If the subscription fails, expand its details to understand and resolve the error, then click Try again. - Lets you trigger on-demand subscription delivery — click Run Now. When the subscription generates successfully, you receive results that match your criteria for the scheduled period.