Alerts and events

Alerts​

Alerts are events that represent a problem that requires investigation and user action.

Alerts exist only while they are active. When an alert is raised (asserted), an identical event is added to the event log. When an alert is removed (de-asserted), an event is added to the event log that states that the problem no longer exists.

The management hub sends new active alerts to the XClarity One portal as soon as they are raised and removes alerts in XClarity One portal as soon as they are resolved. XClarity One also synchronizes alerts with the management hubs every six hours to ensure consistency.

If alerts cannot be forwarded (such as when connectivity is down), the management hub stores alerts until they can be pushed successfully, for up to 24 hours. If connectivity is down for more than 24 hours, only the last 24 hours of alerts are pushed when connectivity is restored.

Events​

XClarity One stores a historical list of all resource and audit events in a single events log. A maximum of 10,000 events are store for each organization. When the maximum number of events is reached, the oldest event is discarded when the next event is received.

• Resource events

  A resource event identifies a condition that occurred on a managed device, management hub, or XClarity One that is not related to direct user action (for example, a connectivity issue between a device and the management hub). You can use these events to track and analyze hardware and management related issues.

• Audit events

  An audit event is a record of user activities that were performed from a management hub or XClarity One (such as a user performing a power action on a device). Each audit event includes the username (email address) and IP address of the user that performed the action. You can use these audit events to track and analyze authentication-related issues and user activity.

The management hub sends events to the XClarity One portal as soon as they are raised. XClarity One also synchronizes alerts with the management hubs every six hours to ensure consistency.

If events cannot be forwarded (such as when connectivity is down), the management hub stores events until they can be pushed successfully, for up to 24 hours. If connectivity is down for more than 24 hours, only the last 24 hours of events are pushed when connectivity is restored.

Metrics and trends​

You can monitor active alert and event metrics by clicking Monitor in the context menu from the Device management view.

The Alerts panel and Events panel summarize the data about active alerts and events that were raised by managed devices, including the following data.

• A circular graph representing the percent of alerts/events by severity (critical and warning). Hover over each colored bar in the graph to see the total number of alerts/events for the specific severity.

• Total number of alerts/events by severity. Click a number to open the Alerts page or Events page with a list of all alerts/events in that severity.

• A line graph representing the number of alerts/events, over time in the last month. Hover over each colored bar in the graph to see the number of alerts/events by severity.

• Total number of alerts/events, by severity, during last month and during the last year.