Alerts

Alerts allow you to receive instant email notifications when something important happens, such as a new software package is installed or a network share is opened by a user. Alert rules are created based on queries. Most predefined reports can be configured as alerts, with certain limitations.

To create a new alert rule based on the report:

1. When working with the report, select Tools / Create Alert. Alternatively, navigate to Real-Time Reports & Alerts / Alerts and follow the “new alert rule” link.
2. Input the report name and create an alert based on it. If the report you search for is not available in the list, it means alerting is not supported for it at the moment.
3. Specify changes to trigger an alert (created, deleted, modified) and add recipients
4. Configure additional filters and logic that make alerting more precise. For example, you can instruct Action1 to send you an alert whenever someone tries to install the Skype instant messenger on a production server.

You can create alert rules based on existing queries. If you can’t find a suitable query to convert to an alert that you need, please let us know, and we’ll try to do our best to add it quickly and at no charge to you.