Granular control over alerts
Currently system and event alerting in Sophos Central is all on or all off.
It would be great to have some administrator defined control over the levels of alerts and the specific events that generate alerts.
Specific Example: Reboot required after software update
This alert happens rather frequently with the rolling updates of the cloud service and the agile development cycles. It is considered at least by this customer to be an informational event and not one that requires immediate analyst attention. As such the ability to downgrade that event from medium to low would be great.
Additionally the ability to toggle on or off the generation of alerts by specific events would also be a welcome feature.
This of course while maintaining logs of the events, as event logging is not equal to event alerting.
Log event, with an option to generate an alert, definable by the admin.
This is absolutely a need. Also to configure different recipient addresses according to the severity of the alert.