Login to the VC which vShield Manager is connected.
we can find the VC name from the below location.
Select the Alarms tab from the vCenter level – vSheild Endpoint Host Status.
In General we can see the below info and make sure to have Alarm type as HOSTS
Next tab , make sure we have the selected the event type.
In Action tab add the notification email when we should get the alert .
For ex I have selected from Green – yellow , Yellow – Red , Red – Yellow , yellow – Green.
when the alert triggers , we will get the mail in the below format .