Configure Rules for Device Monitoring and Alerting

Device Monitoring and Alerting provides you the ability to monitor the device fleet and key directory changes in near real time, so you can quickly identify and respond to issues that need attention. Alerts are triggered when you configure and enable monitoring rules. 

Customizing alert rules allows you to:

• Focus on the metrics most critical to your organization
• Reduce noise by eliminating unnecessary alerts
• Ensure timely notifications for important events
• Align monitoring with your specific IT policies and requirements

Configuring Rules

To configure Rules: 

1. On the Homepage, use the Open Alerts widget to Go To Alerts Dashboard. 
2. On the Alerts dashboard, click Rule Configuration on the top right of the page.
   
   

The Rules dashboard opens displaying all the existing rules.

You can perform the following actions:

• Create New Rules: Set up new alert rules based on your needs
• Edit Existing Rules: Modify the conditions or actions of current rules
• Change Rule Status: Enable or disable rules as needed
• Delete Rules: Remove unnecessary or outdated rules

Creating a Rule

You can create new rules from the Rules dashboard.

To create a new rule:

1. Click the +Rule button to start creating a new rule.
2. Select a rule template from the predefined templates and click Select to view and customize the rule template details.
3. Provide the rule details:
   • Rule Name: Enter a clear and concise name for your rule.
   • Description: Describe the purpose of the rule. 
4. Specify Conditions: 
   • In the Conditions section, define the specific conditions that will trigger an alert. These conditions determine when the rule will activate, ensuring you only receive alerts for relevant scenarios.
5. Set Priority:
   • Use the Priority dropdown to assign a priority level to the rule – Low, Medium, or High. This helps prioritize alerts and manage responses according to the severity of the issue.

6. Once done, click Save. Once a newly created rule is saved, the status will be set to Enabled by default. You can choose to disable using the toggle button.

Editing a Rule

You can update a rule from the rules dashboard.

To update an existing rule:

1. Click the rule that you want to update.
2. Make changes as required.
3. To update the status, click the Actions dropdown.
4.  Select an option:
   • Enable: to activate the rule so the rule can be used to generate alerts.
   • Disable: to deactivate the rule  rule so it is not used to generate alerts.
5. Once you’re done, click Save.

Your changes are saved and the status is updated.

Updating Rule Status

On the Rules dashboard, use the toggle button to Enable/Disable a rule as required.

• Select Enable to activate the rule so the rule can be used to generate alerts.
• Select Disable to deactivate the rule so it is not used to generate alerts.

You can also bulk update the status of one or more rules from the Rules dashboard.

To bulk update the status for multiple rules:

1. Select the rules on the dashboard.
2. Click the Actions dropdown.
3. Select an option:
   • Enable: to activate the rule
   • Disable: to deactivate the rule

The status is updated for all the selected rules.

Deleting Rules

You can delete one or more rules from the Rules dashboard.

To delete rules:

1. Select the rules on the dashboard.
2. Click the Actions dropdown.
3. Select Delete, then you’ll be prompted to click Delete again to confirm.

The rules are deleted and removed from the rules list. 

Automatic Targeting of Device Groups for Alerts Related to JumpCloud Agent

Some of the alert rules allow you to monitor JumpCloud Agent activities. These rules automatically inherit their device group scope from the associate object they monitor. This includes the following alert rules:

• Policy Application Failure
• Managed Software Installation Failure
• Command Execution Failure

For these rules, the system identifies the associated objects like Command, Policy, or Software Application. It then determines which device groups are bound to those associated objects. The alert rule applies to those same device groups automatically.