How to get an email notification when Elements Endpoint Protection Malware Protection is disabled?

Issue:

Admin would like to receive an email alert or notification when Elements Endpoint Protection Malware Protection feature has been disabled on a device for any reason. 

Resolution:

To receive a daily email report if any Elements devices have their Malware Protection disabled, you need to first create a custom view on the Elements Security Center portal's Environment > Devices page and then use that custom view as the data source for an email notification and report. 

How to create a custom view that lists all the devices which do not have malware protection enabled:

1. Log in to the Elements Security Center portal
2. Navigate to the Environment > Devices page
3. From the View drop-down menu, select the Overall status view
4. Click Select field from the filter creator (top-left corner of table) and create the following filter:
   1. Malware Protection – Not equals – Enabled 
5. Click Apply

Then you need to save the new view and set it as an organization view so that it can be selected as a data source in an email notification and report:

1. Open the View drop-down menu in top-right corner 
2. Click Save as…
3. Enter a name 
4. Click Save
5. Open the View drop-down menu again
6. Click on the three dots on the right side of the newly saved view 
7. Click Copy to organization views

Now you can create an email notification and report using this view as a data source:

1. Go to the Reports > Email notification and report page
2. Click Add email report
3. Enter name and select Data source = Devices
4. From the Template drop-down, select the custom view which you just created
5. In the Schedule section, select Frequency as Daily 
6. Select the time
7. Enable Send only when report has content so that an empty report is not sent
8. Click Save