In Cisco AMP for Endpoints console, you can filter down to the smallest aspect and subscribe to that filter. However, I can't see how to filter at the broad level by severity. We have the events open tickets in our support system and want the Medium+ events to do it immediately and the low severity items to come in a daily (or weekly) digest notification.
Is this possible?
