In versions before 7.7.1 the emails for configuration, files, and super users monitoring were always sent to the email you had configured under Email this address on blocked request. If there was no email set up there, no email would be sent.
This was wrong for two reasons. First, if Email this address on blocked request was empty the monitoring features would not send you an email if a notable event took place, lulling you into a false sense of security. Second, having all of these features share the same source of an email made them an all-or-nothing package deal which is rarely the intended way for using the software.
In version 7.7.1 specific settings were added for these features. The settings are:
Email this address on monitored configuration change
Email this address on monitored files change
Email this address on Super Users change
If no email address is set up in one of these specific new features the addresses set up in the Email this address on blocked request feature are used. If that's empty, the emails are sent to all Super Users of the site. As a result, an email will ALWAYS be sent when there is a notable event. This is a behaviour change compared to previous versions.
If you do NOT want to receive any of these emails at all you need to go into the Configure WAF page and disable the respective feature. Leaving the email field empty will NOT work. All of these features come with a toggle switch:
Monitor component configuration
Monitor Global Configuration
Monitor Critical Files
Monitor these files for changes (this is a list; emptying it disables the monitoring of custom critical files)
Monitor Super User accounts