Alert window

You use this window to view or modify the alert definition. To access this window, go to Services > Alerts section and double-click an alert.

The Alert [Alert Name ] window contains the following information about the particular alert definition:

• Name - the alert name.

• Type - the alert type (for details, see Types of alerts).

• Enabled - thecheck box that definesthe state of the alert. When the Enabled check box is selected, the alert will be triggered by the specified condition. In case you do not want to receive the e-mail notifications, disable the alert by clearing the check box.

• Condition - the condition, specifying which event triggers the alert. The alert condition depends on the alert type:

• Object Change alert condition

  1. In the Notify when drop-down list, select an object to track.

  2. Select the condition that will trigger the alert. If you want to trigger the alert when the object is detected on newly discovered computers, select the detected condition.

• Attribute Value alert condition

  1. In the Notify when drop-down list,select the hardware or software component's attribute that the condition will be based on.

  2. Select the conditionfrom the list. If prompted, enter a value for the comparison.

  3. By default, Alloy Discovery checks the attribute value every time computers are audited, and triggers the alert when the value meets the condition. If you want to generate the alert only when the value meets the condition AND has changed since the previous audit, select the Generate notification only if the audit attribute has changed check box.

  TIP: If you want to trigger the alert whenever the attribute value is changed, regardless of its value, use the has any value condition and select the Generate notification only if the attribute has changed check box.

• Free Disk Space alert condition

  1. In the drop-down list, select the disk to track.

  2. Enter the threshold in percent.

• Memory Size alert condition

  1. In the Notify when the RAM size drop-down list, select the condition for checking the RAM size.

  2. Enter the threshold in megabytes.

• Software Product Change alert condition

  1. In the Notify when the following software drop-down, select the condition that will trigger the alert. If you want to detect the presence of a software product, select the exists condition.

  2. Select one of the options:

  • If you want to detect the installation or uninstallation of any software, click Any software.

  • If you want the alert to be triggered on a software product from a specific software group, click Software from a group and select the group. For details about software groups, see Classification of software products).

  • If you want the alert to be triggered on a particular product, click Specific software and type in the product name. In addition, if you want to track a specific product version, click Specific version and type in the version.

  NOTE: The software name and version can include wildcards: use "?" to represent any single character and "*" to represent any sequence of characters.

• UAC alert condition

  • Select the UAC state that will trigger the alert: ON or OFF.

  NOTE: The UAC alert generates notifications only when UAC is supported by the operating system of the audited computer.

• Hardware Change alert condition

  • Select one or several hardware configuration changes that will trigger the alert.

  Conditions are connected with OR logic, meaning that the alert is triggered if the audit snapshot satisfies any of the selected conditions.

  NOTE: It is mandatory to select at least one condition.

• Network Settings Change alert condition

  • Select one or several changes to a computer's network settings that will trigger the alert. Conditions are connected with OR logic, meaning that the alert is triggered if the audit snapshot satisfies any of the selected conditions.

  NOTE: It is mandatory to select at least one condition.

• Conflict Detected alert condition

  If you choose to create Conflict Detected alert, Alloy Discovery automatically defines non-editable alert condition so the alert will trigger when a potentially duplicate computer record is detected.

  This Conflict Detected alert condition is specified in accordance with the system conflict policy rules. For details about database conflicts, see Conflict Resolution.

• Options - this section allows you to change the notification interval, which prevents Alloy Discovery from generating multiple identical notifications from a single computer.

• Notification Interval - this time interval reduces the frequency of identical alerts that may be generated by multiple audits of the same computer, as long as the triggering condition remains true. Alloy Discovery will not generate notifications more often than the specified interval. If you do not want Alloy Discovery to repeat notification about the same event, select Once.

NOTE: The notification interval counts from the moment when the last notification was sent out successfully. For example, if the interval equals to Every day, the next notification will be revoked during 24 hours interval since the last notification was sent out. You can open the Alert Log to check whether the alert e-mail notification was sent successfully or not. For details, see Viewing Alert Log.

• E-mail Notification - this section specifies the notification details:

• From - the sender's e-mail address. If you have configured the default sender's address, this field initialized with this default (for details see Configuring outgoing e-mail). Otherwise, System defaults (Empty) is shown. You can keep the default address or enter another address.

• To -the recipient e-mail address.

• CC - the e-mail address where to send the notification's copy.

• BCC - the e-mail address where to send the notification's blind copy.

NOTE: If you want to specify several addresses in one field, separated them with the comma and semicolon.

• Subject -the message subject.

• Body -the message body.

• Insert Placeholder - allows you to insert placeholders for dynamic text in the Subject and Body fields. The inserted placeholder will be replaced with the actual value at runtime. For details, see Alloy Discovery Administration Guide: Inserting Macros.

• Last Alert - this section shows the details about the last triggered alert. This data is displayed for any last triggered alert whether its notification was sent out successfully or not (for details, see Viewing Alert Log).

• Time (for triggered alerts only) - the date and time when the alert was triggered the last time.

• Computer (for triggered alerts only) - name of the computer where the event triggering the alert occurred.

Related Information for Administrators:

Creating alerts