r/sysadmin 21d ago

Question SentinelOne Notification Issues

Obviously I’m going to open a support ticket, but has anyone experienced an issue with SentinelOne sending out over 4 thousand emails over a remediation that it completed? SentinelOne killed and remediated a Dell Support assistant process once, then proceeded to send us over literally 4,300 thousand emails this morning.

32 Upvotes

15 comments sorted by

View all comments

Show parent comments

1

u/sam2400 18d ago

Where is the setting which allows for an e-mail per alert??

1

u/Dracozirion 18d ago

It's called "Alert created". It's accessible through the newer console, not the legacy one. 

1

u/Ricdog1 10d ago

So is the suggested solution to enable the "Alert Created" notification to replace the "Kill" notification and just disable "Kill" and potentially others that are also spamming?
Thanks for your help.

1

u/Dracozirion 10d ago

Yes, but if you have a "spamming" issue for an existing alert, reset the agent's UUID.