KACE Product Support

Our KACE admin is snowed under at the moment and I kinda need a quick answer on this one....

We're deploying the new Sophos Cloud endpoint agent on our machines, and when the new agent detects a problem or virus etc. it emails everyone who is setup as an admin/helpdesk user in their portal. There is no method built in to target alerts to specific admins based on the computer's location so I'm trying to improvise....

I attempted to use Exchange Hub Transport rules for this but they don't work as we need (even opened a Pro Support ticket with Microsoft and they said no..), so I'm thinking maybe KACE can help. Here's my thinking:

I'd like to create a separate queue for Sophos only, add this email address to the Sophos portal as admin, then when an alert is sent out to everyone this queue gets it too. I'd then create an Exchange Transport rule that bins all incoming emails from the cloud portal except for that queue. The queue has a custom rule on it that looks at the "Comments" box and matches part of the hostname that Sophos includes in the email to one of a predefined list. Based on which one it matches, it will then move the ticket into the correct queue.

For Example:

Hostname: UKPLEWS7893

KACE matches UKPET with the hostname

UKPET is our Peterborough office, so KACE moves the ticket into the Peterborough IT Team's queue

Anyway, I had a look at the custom rule wizard and got lost, then got even further navigationally challenged when I looked at the raw SQL bit...

So if anyone has any ideas please do share.

Thank you!

Chris