View & Act on Generated Alerts
Written by Kali Patrick
Updated at July 27th, 2024
Table of Contents
An Alert is an automatic notification of an event that occurs in a network's infrastructure.
Alerts contain several pieces of information, including:
- the Customer Name
- the Asset Name (i.e., the one triggering the alert)
- the Check Type (i.e., a name for the type of alert triggered such as failed_disk, ntbackup_fail, etc.)
- timestamps for when the alert was created/updated
The main 3 sources of RMM Alerts are:
- Monitors set in a Policy: For example, CPU/RAM, event log, etc.. These are named and provided by Syncro.
- Scripting: In the Scripts tab, using our PowerShell. Here you can create and name as many RMM alerts in a script as you want.
- API: Scripts mostly named and provided by vendors.
Where and How Alerts Appear
Your Syncro devices will generate alerts based on the monitors you've configured in your Policies.
Syncro displays the number of alerts in a red bubble in the Alerts tab itself, and in the upper right-hand corner of the Open RMM Alerts table:
With the information displayed in the Alerts table, you can decide how you want to handle each alert. See Open RMM Alerts Table Reference for details.
Tip: Hover your mouse over a Customer, Asset Name, or Ticket to display the Quick Preview magnifier and see additional information.
Click View to see more information about a particular alert:
Details are supplied by whatever creates the alert. This may be the RMM agent, or supplied via the API call, for example.
Click RMM Alerts to return to the Alerts tab/page, + Create Ticket to enter a ticket based on the alert, or Delete to delete it.
Open RMM Alerts Table Reference
The Alerts table provides the following information about each alert:
| Column Name | Description |
| Customer | The name of the Customer whose asset triggered the alert. |
| Asset Name | The asset that triggered the alert. |
| Remote | If you have these options configured, displays icons that allow you to remotely access the asset or use backgrounding tools. |
| Check Type | The name for the type or category of the alert. Check Types appear as values for the “Trigger Category” condition of alert automations. |
| Failure Description | Summary of the event that triggered the alert. (In alert automations this is also known as the "Body.") |
| Ticket | Click the "Create" link to create a ticket for this asset and customer based on the event. (This does not clear the alert.) |
| Updated | If an event occurs more than once and the alert has not been cleared or deleted, the alert will get updated instead of creating a duplicate. |
| Created | The date the event first occurred. |
| View | Click this button to see additional details about the alert. |
| ... [More] | Click the three dots for more options, including the ability to Mute the alert, Clear the alert, or generate an Automated Remediation. See also Create Automations for Alerts. Mute tells Syncro not to show those types of alerts anymore. To view previously muted alerts, change the length of time an alert is muted, or Unmute them, click View RMM Alert Mutes. Clear deletes the alert, but Syncro will create a new alert if the event happens again. |
Filter the Alerts Table
Syncro provides a filter feature at the top of the Alerts table:
Note: Computer name is the same as Asset name.
Enter some text in any/all of the fields, then click Filter. The Alerts table displays only the results that match your criteria.
Click Reset to clear the filters and redisplay all the alerts.
Additional Actions from the Alerts Tab/Page
When you select multiple Alerts from the table by checking their boxes, the Bulk Actions button menu activates. From here you can quickly Clear Alerts or elect to Run a Script:
Click Show Unmapped Alerts to view alerts for any unmapped assets. (This may occasionally occur if a device was previously deleted, or one of Syncro's antivirus integrations generated an alert for an endpoint managed outside of Syncro.)
Click View RMM Alert Mutes to view previously muted alerts, change the length of time an alert is muted, or Unmute them.
Manage Automated Remediation hops you to the page for alert automations.
Back to Tickets navigates you to the Tickets Tab/Page.