Alarm Management
This section allows threshold values to be configured so that, when triggered during log registration, a notification is sent to all users marked as Administrators in the "Internal Users List", using the configured email settings and the Telegram bot, if enabled.
Events Alarms
This section allows monitoring rules to be configured for specific machines and users within defined time periods.
A frequency value can also be defined. This represents the number of events after which the system sends the alert notification email.This parameter works in combination with the "Minutes" column, allowing recurring alerts to be managed within a defined time interval.
NOTE:
The [Add Recommended] button automatically inserts recommended alerts, initially set as disabled.
Files Alarms
This section is available only when File Monitoring is enabled.
It allows alerts to be configured so that they are triggered when a specific event is detected.
-
The "Path" column defines the reference directory.
-
The "File" column specifies whether the rule applies to a single file or to all files within the folder.
-
The "Control Type" column determines whether the alert is triggered on Read, Write, Delete, or all three operations.
Extension filter: a file extension filter can be specified, (for example .docx or .xlsx) in order to restrict monitoring to specific file types. This makes it possible to monitor, for example, deletion of Office documents within a specific folder.
Software Alarms
This section is available only when Software and Hardware Inventory is enabled in the settings.
It allows alerts to be configured so that a notification is generated when specified software is detected on selected machines or on all machines, in the event of installation, update, or removal.
PowerShell AI
Within each "Alert" configuration screen, the "PowerShell AI" feature is available.
Requests can be transformed and tested as PowerShell commands.
NOTE: Some commands require administrative privileges in order to execute correctly.