# Enable email Alerts for High Severity Detections

**URL:** https://discuss.elastic.co/t/enable-email-alerts-for-high-severity-detections/300320
**Category:** SIEM
**Created:** [March 22, 2022, 10:43am UTC](https://discuss.elastic.co/t/enable-email-alerts-for-high-severity-detections/300320 "2022-03-22T10:43:07Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![jbal24](https://avatars.discourse-cdn.com/v4/letter/j/4491bb/32.png) [@jbal24](https://discuss.elastic.co/u/jbal24)
#### Post date: [March 22, 2022, 10:43am UTC](https://discuss.elastic.co/t/enable-email-alerts-for-high-severity-detections/300320/1 "2022-03-22T10:43:07Z")

</div>

Hi All,

How can I enable email Alerts for ALL High Severity Detections?

Best regards,

---

<div class="post-metadata">

### Author: ![spong](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spong/32/54343_2.png) [@spong](https://discuss.elastic.co/u/spong)
#### Post date: [March 22, 2022, 2:56pm UTC](https://discuss.elastic.co/t/enable-email-alerts-for-high-severity-detections/300320/2 "2022-03-22T14:56:45Z")

</div>

Currently (as of `8.1`), you'll need to leverage the API to bulk add/update actions. So you could fetch all rules with High Severity, then use the bulk API ([docs](https://www.elastic.co/guide/en/security/current/bulk-actions-rules-api.html#bulk-actions-rules-api-update)) to patch them all with the appropriate action(s).

That said, we've started surfacing Bulk Edit Actions in the UI (currently `Index Patterns` and `Tags`) starting in 8.1 ([release notes on it](https://www.elastic.co/guide/en/security/current/whats-new.html#features-8.1)), and we'll be working through the remaining fields (like actions, risk score/severity, etc) in upcoming releases.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/a/9a0fe07faff0f8184c1f162d5bd2b650eeb73ec6.png)

---

<div class="post-metadata">

### Author: ![probson](https://avatars.discourse-cdn.com/v4/letter/p/e47c2d/32.png) [@probson](https://discuss.elastic.co/u/probson)
#### Post date: [March 28, 2022, 11:59am UTC](https://discuss.elastic.co/t/enable-email-alerts-for-high-severity-detections/300320/3 "2022-03-28T11:59:44Z")

</div>

Will there be an ability to filter on rules that do and dont have actions, thinking of when new rules are added, been able to filter all that dont have an action and push.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 25, 2022, 11:59am UTC](https://discuss.elastic.co/t/enable-email-alerts-for-high-severity-detections/300320/4 "2022-04-25T11:59:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
