Auto Response for new system being added to ePO

[Jmac24]

Looking for a way to notify a support team when a new system registers to ePO so that they can run some spot checks that have been requested. I have been looking through the criteria available in auto responses and can't see anything that would correlate to the event we see in the Audit log which would be:

ASCI - New system

In Automatic Responses I tried finding anything correlating to the system being added both in client events and server events but did not see any event descriptions with ASCI or "Added" in them that I could trigger on.

Since I had no luck there, I thought I could use a query to run a report on new systems added in the previous 24 hours and have that scheduled to send out to the team that needs it. No luck there either. 

Help! please and thank you.

[cdinet]

I would have suggested the query route also, so what exactly is not working with it?  How is your query set up?  Does the query run and email you the results whether there are new ones or not?  Or does the server task fail?  

[Jmac24]

Problem with using a query is the same as the automatic response. I can't find the correlating event to bring up results for new systems added to ePO. Do you know what criteria I need to add if there is an event? 

[cdinet]

There is a default query in epo for just that named "New Agents Added to Trellix ePO per Week".

You can set up a server task to run that query and as secondary action, email it out to desired recipients.