An engineer is configuring an alert rule for an organization with 200 endpoint agents to trigger when 5 or more of the agents access a SaaS application over a specific ISP. Drag and drop the…

The alert rule configuration should be set up as follows: 1. Alert Conditions: 'All conditions are met by at least 5 agent and 5 % of agents 1 of 1 time in a row.' 2. Specific Hop Condition: 'Any Hop meets all of: ASN in 5030' The explanation clarifies that 'The rule fires when…

Insights and Alerts

Question

An engineer is configuring an alert rule for an organization with 200 endpoint agents to trigger when 5 or more of the agents access a SaaS application over a specific ISP. Drag and drop the configuration options from the bottom onto the boxes in the alert rule configuration screen. Not all options are used.

Explanation

The alert rule configuration should be set up as follows:

Alert Conditions: 'All conditions are met by at least 5 agent and 5 % of agents 1 of 1 time in a row.'
Specific Hop Condition: 'Any Hop meets all of: ASN in 5030' The explanation clarifies that 'The rule fires when 5 or more Endpoint Agents ( = ≥ 1 % of 200 ) see the traffic traversing ASN 5030 (the backup ISP), indicating fail-over.'

Topics

#endpoint agents#ISP monitoring#alert rules#SaaS monitoring

Community Discussion

No community discussion yet for this question.

Full 300-445 Practice