# Default email recipient address in email action in ELK7.8 Signals or 7.11 detections

**URL:** <https://discuss.elastic.co/t/default-email-recipient-address-in-email-action-in-elk7-8-signals-or-7-11-detections/265304>\
**Category:** SIEM\
**Created:** [February 24, 2021, 9:33am UTC](https://discuss.elastic.co/t/default-email-recipient-address-in-email-action-in-elk7-8-signals-or-7-11-detections/265304 "2021-02-24T09:33:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jancodenew](https://avatars.discourse-cdn.com/v4/letter/j/87869e/32.png) [@jancodenew](https://discuss.elastic.co/u/jancodenew)\
**Post date:** [February 24, 2021, 9:33am UTC](https://discuss.elastic.co/t/default-email-recipient-address-in-email-action-in-elk7-8-signals-or-7-11-detections/265304/1 "2021-02-24T09:33:03Z")

</div>

Hello,

Please let me know if there any option to configure recipient email address in a common file instead of configuring in each detection rules.

This is really difficult task to manually configure email address in each email action when we have more than 500 rules.

Thanks and regards

---

<div class="post-metadata">

**Author:** ![RylandHerrick](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rylandherrick/32/67401_2.png) [@RylandHerrick](https://discuss.elastic.co/u/RylandHerrick)\
**Post date:** [February 24, 2021, 8:23pm UTC](https://discuss.elastic.co/t/default-email-recipient-address-in-email-action-in-elk7-8-signals-or-7-11-detections/265304/2 "2021-02-24T20:23:16Z")

</div>

Hi @jancodenew ! You can use the [Rules Update API](https://www.elastic.co/guide/en/security/current/rules-api-update.html#_optional_fields_for_all_rule_types) to update an individual rule. The notable fields you'll want to provide are `actions` and `throttle` (and your rule's ID, of course). The corresponding [Bulk Update API](https://www.elastic.co/guide/en/security/current/bulk-actions-rules-api.html#_bulk_update) can similarly be used to update multiple rules at once.

I hope that helps! Cheers.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 24, 2021, 8:23pm UTC](https://discuss.elastic.co/t/default-email-recipient-address-in-email-action-in-elk7-8-signals-or-7-11-detections/265304/3 "2021-03-24T20:23:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.