USM Anywhere gives you the option of configuring a threshold after which AlienApp inactivity is a concern. When an AlienApp is not receiving data from your environment within the configured period of time, USM Anywhere generates monitoring events that display in the Events List View (Activity > Events). Since these events are not tied to any USM Anywhere Sensor that you have deployed, you will see a new sensor, with the name of your USM Anywhere subdomain, listed for these events. USM Anywhere will generate new monitoring events until the AlienApp starts receiving data again.
Warning: Monitoring events are generated when your AlienApp is not receiving events from a data source either because the data source is not sending data or because of a filtering rule. If you have a rule that filters data coming from a data source, from the perspective of USM Anywhere, that data source is not sending data.
Warning: Currently, the Event created when AlienApps stop receiving data event is generated at the same time as the regular event and system event. Soon, this event will be generated only as a system event. SeeRegular Events and System Events and Orchestration Rule for the "Event from AlienApp Not Received" System Event for more information.
To configure the period of time
- Go to Data Sources > AlienApps.
- Navigate to your AlienApp and scroll to the bottom of the page.
-
On the bottom of the page, set a period of time in the Create Events if the AlienApp stops consuming data field by clicking the drop-down list.
You can select a predefined value of None, 30 minutes, 1 hour, 2 hours, 4 hours, 6 hours, 12 hours, 24 hours, or 72 hours.
Note: By default this field is set to None.
The events are displayed in the Events List View page.
To configure the period of time for all AlienApps
- Go to Settings> System.
- In the left navigation panel, click AlienApps Settings to open the page.
-
Set a period of time in the Create Events if the AlienApps stop consuming data field by clicking the drop-down list. You can select a predefined value between None, 30 minutes, 1 hour, 2, 4, 6, 12, 24, or 72 hours.
Note: By default this field is set to None.
To see events created when your AlienApp stops receiving data
- Go to Activity > Events.
-
Select Event from AlienApp not received in the Event Name filter.
The results are shown with the filtered events.
-
Click the event to see its details.
Note: No events will be generated if your AlienApp has not previously received data.