Device Monitoring and Alerting provides you the ability to monitor the device fleet and key directory changes in near real time, so you can quickly identify and respond to issues that need attention. Alerts are triggered when you configure and enable monitoring rules.
Customizing alert rules allows you to:
- Focus on the metrics most critical to your organization
- Reduce noise by eliminating unnecessary alerts
- Ensure timely notifications for important events
- Align monitoring with your specific IT policies and requirements
Configuring Rules
To configure Rules:
- On the Homepage, use the Open Alerts widget to Go To Alerts Dashboard.
- On the Alerts dashboard, click Rule Configuration on the top right of the page.
The Rules dashboard opens displaying all the existing rules.
You can perform the following actions:
- Create New Rules: Set up new alert rules based on your needs
- Edit Existing Rules: Modify the conditions or actions of current rules
- Change Rule Status: Enable or disable rules as needed
- Delete Rules: Remove unnecessary or outdated rules
Creating a Rule
You can create new rules from the Rules dashboard.
To create a new rule:
- Click the +Rule button to start creating a new rule.
- Select a rule template from the predefined templates and click Select to view and customize the rule template details.
- Provide the rule details:
- Rule Name: Enter a clear and concise name for your rule.
- Description: Describe the purpose of the rule.
- Specify Conditions:
- In the Conditions section, define the specific conditions that will trigger an alert. These conditions determine when the rule will activate, ensuring you only receive alerts for relevant scenarios.
- Set Priority:
- Use the Priority dropdown to assign a priority level to the rule – Low, Medium, or High. This helps prioritize alerts and manage responses according to the severity of the issue.
- The Update Interval field indicates how quickly the rule will generate an alert after the event occurs. This can range from real-time to a delay of up to XX minutes, depending on the specific rule.
- The Category field indicates whether the rule applies to System (end-user devices events) or Directory (JumpCloud Directory events). This helps categorize and organize your rules based on their scope.
For software addition and removal rules, you must connect the rule to the Device Group. Click the Device Groups tab and select the device group that you want to connect to the rule. This ensures the rule is applied to all devices in the Device Group.
If you have not created a Device Group, see Create a Device Group to learn more.
- Once done, click Save. Once a newly created rule is saved, the status will be set to Enabled by default. You can choose to disable using the toggle button.
For software removal and addition monitoring rules, ensure that you have System Insights enabled.
Editing a Rule
You can update a rule from the rules dashboard.
To update an existing rule:
- Click the rule that you want to update.
- Make changes as required.
- To update the status, click the Actions dropdown.
- Select an option:
- Enable: to activate the rule so the rule can be used to generate alerts.
- Disable: to deactivate the rule rule so it is not used to generate alerts.
- Once you’re done, click Save.
Your changes are saved and the status is updated.
Updating Rule Status
On the Rules dashboard, use the toggle button to Enable/Disable a rule as required.
- Select Enable to activate the rule so the rule can be used to generate alerts.
- Select Disable to deactivate the rule so it is not used to generate alerts.
You can also bulk update the status of one or more rules from the Rules dashboard.
To bulk update the status for multiple rules:
- Select the rules on the dashboard.
- Click the Actions dropdown.
- Select an option:
- Enable: to activate the rule
- Disable: to deactivate the rule
The status is updated for all the selected rules.
Deleting Rules
You can delete one or more rules from the Rules dashboard.
To delete rules:
- Select the rules on the dashboard.
- Click the Actions dropdown.
- Select Delete, then you’ll be prompted to click Delete again to confirm.
The rules are deleted and removed from the rules list.
Deleting rules does not remove any alerts previously generated by that rule. These alerts will continue to be visible in the Alert dashboard even after the rule is deleted.
Automatic Targeting of Device Groups for Alerts Related to JumpCloud Agent
Some of the alert rules allow you to monitor JumpCloud Agent activities. These rules automatically inherit their device group scope from the associate object they monitor. This includes the following alert rules:
- Policy Application Failure
- Managed Software Installation Failure
- Command Execution Failure
For these rules, the system identifies the associated objects like Command, Policy, or Software Application. It then determines which device groups are bound to those associated objects. The alert rule applies to those same device groups automatically.
- Changing the associated object device group binding automatically updates the alert rule’s scope.
- Regularly review device group assignments of policies, applications, and commands to maintain appropriate alert coverage.