---
locale: "en"
updated_at: "2026-08-04T10:05:19.030Z"
canonical: "https://www.isdecisions.com/en/fileaudit/docs/getting-started/setting-up-an-alert"
---

# Setting up an alert

Trigger an email alert on a specific file access event.

## Before you begin

FileAudit provides [2 types of alerts](/fileaudit/docs/reference/alerts):

- **Single access alerts**, triggered by an individual access event,
- **Mass access alerts**, triggered when multiple access events occur within a defined period.

This tutorial uses a Single access alert. 

Make sure you have completed the previous steps in this guide:

- [Configuring your first audit path](/fileaudit/docs/getting-started/configuring-your-first-audit-path): an audit path such as `C:\FileAudit-Test` is set up.
- [Displaying the events](/fileaudit/docs/getting-started/displaying-events): file access events appear in the **All access events** report.

## Create and configure a single access alert

1. Open the **FileAudit console**.
2. Click **Alerts**.
  ![Dashboard alerts](https://a.storyblok.com/f/122374/1298x826/915b576b80/dashboard-alerts.png)
3. Under **Single access**, click **Add**.
  ![Add a single access alert](https://a.storyblok.com/f/122374/1298x826/17bb53eeb3/select-a-single-alert.png)
4. From the **Main tab**, in the **Access type** drop-down list, select a simple condition such as **File deletion**.
  ![Alert configuration](https://a.storyblok.com/f/122374/796x696/fe7525f575/alert-configuration-main.jpg)
  > **Note**
  >
  > The fields **Domain**,  **User** and **Source** should be kept empty if you want to be alerted for any domain, user or source that generates an event.
  > 
  > The **Source** field allows you to specify the name of the process generating the access attempt when the file/folder is accessed locally or the IP address of the machine from which the access has been performed when the access is performed through the network.
5. Select the audited path `C:\FileAudit-Test` from the **Paths** tab.
  ![Alert : add a Windows or Cloud path](https://a.storyblok.com/f/122374/656x378/7ee2dc49a5/alert-add-windows-cloud-path.png)
6. From the **Email** tab, enter a destination email address.
  ![Alert configuration - E-mail](https://a.storyblok.com/f/122374/1298x830/f3cbbcda45/alert-configuration-email.png)
7. Click **Save**.

## Configure email delivery

FileAudit sends alert notifications by email. If this isn't already configured, set it up now with your organization's SMTP server:

1. In the FileAudit console, open **Settings** and select **E-mail settings**.
2. In **Server**, enter your SMTP server address.
3. In **Port**, enter the port your server uses.
4. In **Sender E-mail**, enter the address that will appear as the sender.
5. Set **Mode** according to what your server accepts, and provide credentials if required.
6. Click **Save**, then send a test email to confirm delivery.

> **Note**
>
> This covers the standard case (internal relay, hosted mail server, basic authentication). If your provider requires OAuth2 (Microsoft 365, Google Workspace), see [Configure email settings](/fileaudit/docs/guides/configuration/configure-email-settings) for the full procedure.

## Test the alert

Delete a file in `C:\FileAudit-Test`.

If configured correctly:

- The alert is triggered.
- A notification is sent to the configured email address.

![](https://a.storyblok.com/f/122374/700x422/c16b3638e2/alert-trigerred.png)

## Next steps

You have now: 

- Configured an audit path
- Viewed file access events
- Created a single access alert

You have the basics to start using FileAudit. Continue with [Best practices](/fileaudit/docs/getting-started/best-practices) to make sure your setup is production-ready.