Configuring consolidated Antimalware alerts
With the Bitdefender plugin for ConnectWise Automate integration with GravityZone, you can use the Bitdefender GravityZone Antimalware Event (Consolidated) alert template to aggregate multiple antimalware detections to a single ticket.
This is how the Bitdefender GravityZone Antimalware Event (Consolidated) alert template works:
The alert template triggers a script for the Bitdefender GravityZone - Antimalware Event monitor.
The script consolidates alerts for Antimalware events by the following criteria:
Computer name, malware name and file name all match.
The existing ticket has the status New.
If these conditions are met, the script appends any new alert to the existing ticket. Should one condition not be met, the script creates a new ticket.
The Bitdefender GravityZone Antimalware Event (Consolidated) template is not active by default. To use it, you must follow these configuration steps:
In ConnectWise Automate Control Center, go to Automation > Monitors > Internal Monitors tab.
Double-click to open Bitdefender GravityZone – Antimalware Event monitor.
Go to the Alerting tab.
Under Alert Config section, select Bitdefender GravityZone Antimalware Event (Consolidated) from the list.
Click Save.
Make sure the monitor is not disabled after changing the template. If disabled, you have to reset it:
Open the Bitdefender GravityZone – Antimalware Event monitor.
Click Reset Monitor.
Close the Monitors window and reopen it again to see Bitdefender GravityZone – Antimalware Event is enabled.