USM Anywhere™

Events Created When AlienApps Stop Receiving Data

USM Anywhere gives you the option of configuring a threshold after which AlienApp inactivity is a concern. When an AlienApp is not receiving data from your your environment within the configured period of time, USM Anywhere generates monitoring events that display in the Events List View (Activity > Events). Since these events are not tied to any USM Anywhere Sensor that you have deployed, you will see a new sensor, with the name of your USM Anywhere subdomain, listed for these events. USM Anywhere will generate new monitoring events until the AlienApp starts receiving data again.

Warning: Monitoring events are generated when your AlienApp is not receiving events from a data source either because the data source is not sending data or because of a filtering rule. If you have a rule that filters data coming from a data source, from the perspective of USM Anywhere that data source is not sending data.

To configure the period of time

  1. Go to Data Sources > AlienApp.

  2. Navigate to your AlienApp and scroll to the bottom of the page.

  3. On the bottom of the page, set a period of time in the Create Events if the AlienApp stops consuming data field by clicking the drop-down list. You can select a predefined value between None, 1 hour, 6, 12, 24, or 72 hours.

Configure your AlienApp to create an event if your app stops consuming data

Note: By default this field is set to None.

The events are displayed in the Events List View page.

To see events created when your AlienApp stops receiving data

  1. Go to Activity > Events.

  2. Select Event from AlienApp not received in the Event Name filter.
    The results are shown with the filtered events.

  3. Click the event to see its details.

Search for Event From Plugin Not Received in your events to locate events triggered when your plugin stops consuming data

Note: No events will be generated if your AlienApp has not previously received data.