Get Started: Device Monitoring and Alerting

Overview

Device Monitoring and Alerting provides you the ability to monitor the device fleet and key directory changes in near real time, so that you can quickly identify and respond to issues that need attention. 

Alerts are triggered when you configure and enable monitoring rules. You can choose the desired priority of the alerts based on your needs. The triggered alerts are displayed and managed from the JumpCloud management console. 

Key Capabilities

1. Directory and User Monitoring: Receive alerts for user additions and privilege changes in your JumpCloud directory.
2. Agent Activity Monitoring – Monitor results of JumpCloud policy application, command execution, and Software Management.
3. Custom Script-Based Monitoring: Create tailored monitoring using custom scripts to alert on specific conditions unique to your environment.
4. Flexible Alert Configuration: Set up alerts with customizable thresholds and priorities to focus on what’s most important to your organization.
5. Centralized Alert Management: View, triage, and manage alerts directly from the JumpCloud Admin Portal.

Supported Platforms

Device support includes  macOS, Windows, and Linux devices compatible with the JumpCloud Agent. Mobile Devices are currently not supported.

Alert Types

The following types of alerts are currently available:

• Script execution failures
• Policy application failures
• Managed software install failures
• User addition to directory
• User or user group privilege elevation
• Software addition and removal initiated by end users

Additional alerts including alerts for disk usage and device uptime or offline, will be available soon.

Viewing Open Alerts

The Open Alerts widget on the Homepage shows you the total number of alerts across your organizations.

The Open Alerts widget displays a colored chart with different priority levels assigned to each alert:

• Red: High
• Orange: Medium
• Blue: Low

You can view more details about the alerts on the Alerts dashboard.

• Click Go to Alerts Dashboard to view the dashboard and additional alert details.
• You can also navigate to the Alerts dashboard by clicking the Alerts (bell) icon in the top right of the Admin Portal. 

Using the Alerts Dashboard

The Alerts dashboard provides a centralized hub for monitoring and managing all system alerts.

The dashboard consists of four tabs that display alerts based on their status:

• Open: Displays all open alerts that need attention
• Acknowledged: Displays all alerts that have been marked acknowledged
• Resolved: Displays all alerts that have been marked resolved
• All: Displays all alerts 
  

Search and Filter

You can use the Search and Filter options to quickly find what you need. You can either type in the Search field or select from a list of predefined filters. 

To use the filters:

1. Click  Filter to view a list of predefined filters. 
2. Select one or more filters, and click Apply. The table is updated and displays the filtered results. 
3. You can click Clear All to remove all the filters and reset the table data.

Managing Alerts

You can manage the alerts from the dashboard. This includes changing the status of alerts or deleting them.

To manage alerts:

1. Select the alerts that you want to update.
2. Click the Actions dropdown.
3. Select one of the following options:
   • Mark as Acknowledged: This indicates that the alert is seen but not yet resolved.
   • Mark as Resolved: This indicates you have found and resolved the alert.
   • Mark as Open: This indicates the alert still needs attention and is not yet resolved.
   • Delete: This deletes the selected alerts from the list.

Viewing Alert Details

The Alerts dashboard provides essential information for each alert. However, more comprehensive details are available on the individual alert details page.

On the Alerts dashboard, click the alert that you want to view the details to access the detailed information about a specific alert.

Modifying Alert Status

You can modify the alert status from the details page. 

1. Click the Actions dropdown.
2. Depending on the Status of the alert, you will find some or all of the following options. Select the appropriate options:
   • Mark as Acknowledged: This indicates that the alert is seen but not yet resolved.
   • Mark as Resolved: This indicates you have found and resolved the alert.
   • Mark as Open: This indicates the alert still needs attention and is not yet resolved.
   • Delete: You can use this option to delete the alert from the list.
3. Once you’re done, click Alerts to go back to the dashboard.