Discussions related to Microsoft 365 protection.
Post Reply
absentpetti
Novice
Posts: 7
Liked: never
Joined: May 29, 2025 2:05 am
Full Name: Christopher Dine
Contact:

Feature Request: Structure all emails in predictable ways and include a "severity/priority" field

Post by absentpetti »

Hi Team,

We ingest all emails from our systems and vendors into an alerts management system.
This uses either webhook field mapping, or regex parsing of emails, to extract information from alerts/reports into usable information.

Included in this is the severity which we then base some automation around.
Items that are informational only are ingested as an alert only but dont trigger any further incidents or review by the helpdesk.
Items that are flagged as "error" or "critical" get raised as incidents at specific priority levels.

This requires us being able to reliably and predictably determine key word matching of certain fields extracted from the email.
Constantly changing the format of different types of emails we receive and not including clear severity/status/priority indicators in predictable locations make this almost impossible.

Currently we have a license changed notification trigger a ticket to be raised. I can't for the life of me figure out what in the alert caused that to happen. But its almost certainly something to do with the lack of consistency and predictability of the emails we're receiving.

I would ask that all email notifications we're being sent be reformatted to follow predictable formats and include labelled fields. At a minimum the severity/priority of the email.

Looking at a recent backup completed email it's subject is "Backup User accounts backup completed successfully" and the body excerpt:

Code: Select all

The backup "User accounts backup" for Ligeti Partners that finished on Thu Jul 17 2025 18:46:20 UTC+00:00 has completed with warning. 

Please view your backup logs for further details: <a button containing a link to "view logs">
I would ask that the information be structured and aligned to labels something like;
Backup job: <backup job name>
Status: informational/warning/success/failed
Date: <date+time stamp>
Logs: <link for further info/logging>
Message: <the rest of the body of the email>. Could be the same info in plain unstructured English.
TexAgs98
Lurker
Posts: 1
Liked: never
Joined: Dec 15, 2025 12:26 pm
Full Name: Steve Summarell
Contact:

Re: Feature Request: Structure all emails in predictable ways and include a "severity/priority" field

Post by TexAgs98 »

I second a change to the email subject for all notifications. We use Veeam B&R as well and the emails are formatted much better. Start with the condition of backup [Success][Failure][Warning] with the job name directly after. This is much easier to read than 'Backup run of the policy" which is completely unnecessary. We are trying to monitor via mobile devices and the subjects are so long it gets cut off.

Allow us to modify ourselves or at least make it identical to your existing Veeam platform please.
Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest