You can create an Alert to notify you and other console users that baseline drift has crossed a set threshold. When you enable a baseline drift alert, the triggering conditions are evaluated each time the report generation is complete.

Each time baseline drift conditions exist that meet the triggering conditions, the console highlights the alert in color and adds a Reset button on both the Home page dashboard and the Alerts page. It also sends alert email to all subscribers to this alert. You can reset the alert manually by clicking the Reset button next to its name on the Alerts page. Drift alerts automatically reset when the drift in the specified drift report falls below the threshold for the specified parameter (user, computer, or policy).

See Using App Control Alerts for more on alert behavior.

Create a Baseline Drift Alert

To create a baseline drift alert, perform the following procedure.

Procedure

  1. On the console menu, click Tools > Alerts to display the Alerts page.
  2. On the Alerts page, click the Add Alert button.
    The Add Alert page with the Type, Drift Report, and Alert When fields highlighted
  3. In the General panel, enter an Alert name and a Message (which is sent to subscribers when the alert is triggered).
  4. In the Type panel, click Baseline Drift Alert from the Type menu.
  5. In the Criteria panel, select the drift report whose data you want the alert to monitor.
    Note: If no drift reports have been created yet, the Drift Report line displays a message to that effect instead of the menu.
  6. In the Alert when line, set the threshold at which you want an alert to be triggered.
  7. Click Save to create the alert.
  8. On the Alerts page, click the View Details button next to the name of the alert.
  9. On the Alert Information page, in the Subscribers section, enter each email address to which you want alert email sent and click Add after each one.
  10. To specify the email format, choose a format from the menu to the right of the address box.
  11. To resend alert emails periodically as long as the alert is not reset, set Reminder Mail to Enabled and choose a time interval.
  12. Click Save.