Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Select Alert Configurations

  1. Select Administration > System Settings.
  2. From the menu, select Alert Configuration.
  3. Click Create an Alert.
  4. In the Alert Configuration window, enter the following information:
    Field Description
    Event Name

    The type of event that generates the alert. The options are:

    • CPU
    • Memory
    • Disks
    • Threads
    • Service Down
    • Login Failure
    • Certificate Event
    • Service Up
    • Key Creation
    • Node Management
    • Node State Change
    • User Management
    • Connector Management
    • Node Communication Action
    • Environment Management

    Trigger value/Greater or Less

    Alerts fall into two categories:

    • those driven by thresholds being crossed, and
    • those driven by events that occur.

    This setting pertains to alerts for thresholds. It does not apply to the strict occurrence of events such as a login failure or the creation of a key.

    The limit for an event which, if more or less than specified value, triggers an alert. For example:

    • If the value for CPU is greater than 90, and system CPU usage goes up to 91%, an alert is triggered.
    • If the value for CPU is less than 10%, and the system CPU usage drops to 9%, an alert is triggered.

    Alert notifications are sent to the specified recipient. If you selected Show on the Home page, the alert is listed on the Management Console dashboard.

    Although administrators are typically most often interested in events that indicate greater-than status, sometimes you might want to know when events drop below the trigger to indicate a possible problem (for example, no activity appears to be taking place).

    Environments The environments to which the alert applies. You can choose specific environments or all environments.
    Connectors If connectors are available, only alerts related to those connectors and their associated applications will be visible.
    Email list The email addresses of those who should receive the alert notifications. The most common recipient is the system administrator, but you can add other addresses. Enter each recipient email address, separating the addresses by commas. System Administrator and Key Administrator will include all users with the matching role. This list can be empty if you only want it to show in the Alert Messages section of the Management Console.
    Alert interval How often the alert should be sent. Select a number and type of interval (hour, minute, or day). Select 0 to get all instances of an event type, such as Key Creation.
    Field Description
    Show Alerts

    Click the toggle button to enable alerts to be listed in the Alert Messages section of the Management Console dashboard. You might want to use this option for alerts relating to more serious conditions.

    Those alert messages will be seen on the dashboard whenever the

    Home page is displayed.

    Description Enter a description of the alert.
  5. Save the configuration.