Monitore
Konfigurieren Sie Überwachungsrichtlinien, um den Zustand von Geräten zu verfolgen und Probleme automatisch zu erkennen. Richten Sie integrierte und skriptbasierte Monitore ein, konfigurieren Sie die Alarmweiterleitung und prüfen Sie den Überwachungsverlauf.
Ressourcen
Auslastung der Kernressourcen: CPU- und Speicherauslastung im Verhältnis zu einem Schwellenwert.
Festplatte
Zustand und Leistung des Speichers: Kapazität, Durchsatz, IOPS, Latenz, Warteschlangenlänge, Verschlüsselungsstatus und SMART-Status.
- Festplattennutzungs-MonitorAlert when available disk space on a device drops below a defined threshold.
- FestplattenverschlüsselungsstatusAlert when a device's primary partition isn't encrypted. The Encryption Status monitor checks BitLocker on Windows, FileVault on macOS, and LUKS on Linux with no configuration needed.
- Festplattendurchsatz-MonitorAlert when combined disk read and write throughput exceeds a MB/s threshold for a sustained duration. Covers drive selection, thresholds, breach duration, and remediation.
- Festplatten-IOPS-MonitorAlert when a drive's read and write operations per second exceed a threshold for a sustained period. Configure drive scope, IOPS threshold, breach duration, remediations, and notifications.
- Datenträger-Latenz-MonitorAlert when read and write latency on a device's drives climbs above a threshold and stays there. Covers drive targeting, thresholds, breach duration, remediation, and notifications.
- Monitor für Festplatten-WarteschlangenlängeAlert when a disk's queue of pending I/O operations stays above a threshold. Covers configuration, how Level reads queue depth on Windows, macOS, and Linux, and threshold guidance.
- Überwachung der Festplatten-AktivitätszeitAlert when a device's drives stay busy above a percentage threshold for a sustained period. Covers configuration, per-OS data sources, and how readings are sampled.
- Festplatten-SMART-Status-MonitorDetect failing drives before they die. The SMART Status monitor watches every drive's SMART self-assessment on Windows, macOS, and Linux and alerts the moment any drive reports a failing status.
Netzwerk
Konnektivität und Verbindungsverhalten: Erreichbarkeit der Geräte, Ping und Bandbreitensättigung.
- Verbindungs-MonitorAlert when a device goes offline or comes back online, with configurable breach duration and auto-remediation.
- Netzwerk-Ping-MonitorAlert when ping latency to a host stays above your threshold. Learn how the Network Ping monitor samples latency, what each setting controls, and how to tune thresholds and breach…
- Netzwerkauslastungs-MonitorAlert when a device's bandwidth usage stays above a set percentage of its link speed for a sustained duration. Passive measurement, no test traffic. Configure threshold, breach duration, severity, and…
- Netzwerk: Abnormaler UploadAlert when a device's upload bandwidth exceeds a threshold for a sustained duration. Useful for catching data exfiltration, runaway backups, and other unexpected outbound traffic.
Sicherheit
Risiko- und Statussignale: Antivirus, fehlgeschlagene Anmeldungen, Kontoänderungen und ungewöhnlicher ausgehender Datenverkehr.
- Benutzer-MonitorAlert when a device's local user accounts drift from your expected list. Catch rogue or unauthorized accounts the moment they appear, or get notified when a required service account goes…
- Monitor für fehlgeschlagene AnmeldungenAlert on repeated failed login attempts on Windows, macOS, and Linux. Set a threshold and time window, scope to all users or admins only, and attach remediations like locking the…
- Antivirus-MonitorGet alerted when antivirus protection on a Windows workstation is disabled, running stale definitions, or has real-time protection turned off. Reads Windows Security Center, so it works with most AV…
System
Status auf Betriebssystem- und Prozessebene: Anwendungen, Prozesse, Dienste, Ereignisprotokolle und Betriebszeit.
- Anwendungs-MonitorGet alerted when required software goes missing or unauthorized software shows up.
- Prozess-MonitorAlert when a specific process starts running or stops running on a device.
- Dienst-MonitorAlert when a specific service stops or starts, with the option to automatically restart it.
- Ereignisprotokoll-MonitorAlert when specific Windows Event IDs appear a defined number of times within a set time window.
- Betriebszeit-MonitorAlert when a device's uptime passes a day threshold you set, so machines stuck on pending patches or slow memory leaks don't go unrebooted.
Benutzerdefiniert
Erstellen Sie benutzerdefinierte Monitore, die PowerShell-, Bash- oder Python-Skripte ausführen, um den Gerätezustand zu bewerten.
- Skript-Monitor ausführenMonitor any device condition by running a script and evaluating its output against a threshold or string match.
- Skript-Monitor-BeispieleWorked examples showing complete scripts and monitor configurations for common use cases.
- Überwachung von systemd-Unit-Dateien unter LinuxWhy Linux systemd unit files trigger false 'Down' alerts in service monitors and how to monitor them accurately using a script monitor.
