Troubleshoot: Device Monitoring and Alerting Issues

Cause:

For rules that are associated with a large number of devices (exceeding 1000), when Existing Conditions are enabled, there may be a delay of up to 15 minutes in alert generation. This typically occurs when the total number of existing conditions (for which alerts need to be generated) exceeds 1,000.

Solution: You can create multiple rules with different conditions and associate different device groups to help keep the total number of alerts for existing conditions below 1,000.

The option to enable/disable rules from the Rules dashboard is currently not functioning as expected for the following rules:

• Command Execution Failure
• Managed Software Installation Failure
• Policy Application Failure

Cause:

If a command, policy, or software being used in the conditions section of a rule is removed from the system, you will be unable to enable or disable the rule from the Rules dashboard. 

Solution: Go to the rule details page, and use the Enable/Disable toggle button.