issues with notifcations in security incident response?

[maximus]

Hi All!

After installation of the Security Incident Response plugin we faces with unexpected behavior of notifications.

After creation of the Security Incident   there is no notification about creation of the SIR. But there is one about update of the state.

We tried to find a place where notification is triggered. But actually there is no success .We know that notification about an update triggered with event "sir.request.changed". And we know that event triggered. But cannot find where.

Does anybody know how to find where event is triggered and why it is triggered during the creation of the Security Incident?

[maximus · Accepted solution]

Currently we found an answer.

sn_si_incident table extends sm_order. There is business rule "Notification for request" with script:

function onBefore(current, previous) {

      var configProcessor = new SMConfigProcessor();

      configProcessor.sendNotifications(current, previous, "sm.request.changed");

}

In Script Include "sm" replaced to table prefix "sir" and event sir.request.updated is triggered.