Configuring and Managing Alerts

Overview

DEX Alerts help IT teams detect and respond to user-impacting device issues before they become support escalations. You can create alert profiles for built-in DEX metrics, use sensor fields as alert inputs, combine multiple conditions with criteria patterns, and customize alert notifications for the people who need to act on them.

Use DEX Alerts when you want to:

• Monitor built-in performance and experience metrics such as CPU, memory, storage, battery, and similar endpoint health signals
• Trigger alerts from sensor fields that collect custom device data
• Define advanced multi-condition logic with criteria patterns such as (1 AND 2) or ((1 AND 2) OR 3)
• Customize notification subjects and message content with alert variables
• Draft and refine alert profiles with Zia by using natural language prompts

How Alerts Work

The alert lifecycle typically follows these steps:

1. Create an alert profile and define one or more alert conditions.
2. Select the metric or sensor field to evaluate and configure the threshold, aggregation, and evaluation window.
3. If the profile uses multiple conditions, define the criteria pattern that controls how those conditions are evaluated together.
4. Configure how often the profile is evaluated and how alert notifications should be handled.
5. Deploy the alert profile to the required devices.
6. When the configured criteria are met, DEX generates an alert and notifies the configured recipients.

Create an Alert Profile

To create a new alert profile:

1. Go to DEX > Alerts.
2. Open the Alert Profiles tab.
3. Click Create Alert Profile.
4. Enter a profile name and, if required, add a description.
5. Add one or more alert conditions.
6. Configure the trigger behavior, monitoring interval, cool off period, priority, and notification settings.
7. Save the profile and deploy it to the required devices.

Metrics and Sensor Fields

Each alert condition starts with a metric selection. DEX Alerts support both built-in metrics and sensor fields.

• Built-in metrics are the standard DEX metrics available in the alert builder.
• Sensor Fields let you use values collected by sensors as alert inputs.

To use a sensor field in an alert:

1. Create the required sensor and deploy it so the field begins returning values.
2. Open the alert profile builder and add a condition.
3. Open the metric picker and expand Sensor Fields.
4. Select the required field and define the evaluation rule.

See Sensors for the sensor creation workflow.

Criteria Patterns

When you add more than one condition to an alert profile, you can define how those conditions are evaluated together by using a criteria pattern.

Common examples include:

• (1 AND 2) to trigger only when both conditions are true
• (1 OR 2) to trigger when either condition is true
• ((1 AND 2) OR 3) to mix strict and fallback conditions in a single alert profile

Use parentheses whenever you want to control precedence across more complex rules.

Notifications and Actions

You can enable notifications directly from the alert profile and define the recipients who should receive them.

Use Recustomize in the notification section to edit the notification subject and body. While editing the notification template, type $ or use the Variables panel to insert supported alert variables.

To use a variable:

1. Open an alert profile and enable notifications.
2. Click Recustomize in the notification section.
3. Edit the subject or message body.
4. Type $ or choose a value from the Variables panel.
5. Save the notification template and then save the alert profile.

Example Template

Example subject:

$alert.priority$ - $alert.name$ detected in $device.name$

Example message body:

Field	Value
Device Name	$device.name$
Remote Office	$device.remoteoffice$
Logged on Users	$device.userloggedon$
Domain Name	$device.domainname$
Alert Profile Name	$alert.name$
Alert Priority	$alert.priority$
Alert Triggered Time	$alert.triggeredtime$
Alert Criteria	$alert.criteria$

Alerts with Zia

Zia can help you draft alert profiles by converting a natural language request into alert conditions and profile settings.

A typical flow is:

1. Open Zia from the DEX module or from the alert creation flow.
2. Describe the alert you want to create. For example, ask Zia to monitor a built-in metric, a sensor field, or a multi-condition rule.
3. Review the generated draft and confirm the metric selection, thresholds, criteria pattern, and priority.
4. Refine the draft further if required before saving the alert profile.

Example: Create a Boot Performance Alert with Zia

This example shows a complete Zia-assisted alert authoring flow for a built-in alert profile.

1. Open DEX > Alerts > Alert Profiles and launch Ask Zia.
2. Enter a prompt that describes the boot performance issue you want to monitor.
3. Review the generated draft and apply it to open the populated alert profile form.
4. Validate the thresholds, monitoring interval, cool off period, and priority before saving.

Sample Prompts

Network

1. High latency or packet loss

   Copy

   Alert when gateway latency exceeds 150 ms OR packet loss exceeds 3%. Set priority to High.

2. Low Wi-Fi throughput

   Copy

   Alert when Wi-Fi receive rate is less than 1000 KBps OR Wi-Fi transmit rate is less than 1000 KBps. Set priority to Medium.

3. Complete network connectivity lost

   Copy

   Alert when Wi-Fi connection status equals Disconnected AND Ethernet connection status equals Disconnected. Set priority to Critical.

Performance

1. Memory usage

   Copy

   Alert when memory usage exceeds 90%, averaged over 10 minutes. Set priority to Critical.

2. Memory swap rate high RAM exhausted

   Copy

   Alert when memory swap rate exceeds 500 pages, averaged over 5 minutes, OR memory swap size exceeds 4 GB, averaged over 5 minutes. Set priority to High.

Disk

1. Disk health degrading

   Copy

   Alert when disk health status equals Warning OR disk health status equals Critical. Set priority to Critical.

2. Legacy disk type detected

   Copy

   Alert when OS disk type equals HDD. Set priority to Low.

Battery

1. Battery health check

   Copy

   Alert when battery health percentage drops below 60% OR cycle count exceeds 800. Set priority to High.

2. Short battery backup time

   Copy

   Alert when battery full backup time drops below 1 hour. Set priority to Medium.

Startup

1. Too many startup apps slowing boot

   Copy

   Alert when the last boot startup app count exceeds 20 apps. Set priority to Medium.

2. Startup driver adding significant delay

   Copy

   Alert when the startup driver total time for driver VirtualBox exceeds 20 seconds. Set priority to Medium.

Security

1. High app crash rate stability issue

   Copy

   Alert when app crash count exceeds 5 in the last 3 days for any application. Set priority to High.

2. Antivirus disabled

   Copy

   Alert when antivirus status is Disabled. Set priority to Critical.

Assets

1. Warranty expiring soon

   Copy

   Alert when warranty expiry date is within 30 days. Set priority to Medium.

2. Unexpected local user accounts

   Copy

   Alert when total local user count exceeds 3.

If the Required Alert Variable Is Unavailable

If the alert profile you want to create is not available in the predefined alert variables, create a sensor for that value from within the Alerts screen and then use the new sensor field in the alert profile.

1. Start the alert flow in Zia or in the regular alert profile builder.
2. If the requested value is unavailable, create a sensor for that value and deploy it to the required devices.
3. Return to the alert profile, open the metric picker, expand Sensor Fields, and select the new field.
4. Complete the remaining thresholds and save the profile.

Use Ask Zia for additional Zia examples and prompt ideas.

Deploy Alert Profiles

After saving an alert profile, deploy it to the devices that should be monitored. Deployment activates the monitoring logic on the target devices, allowing DEX to start evaluating the configured rules.

Before deployment, confirm that the selected devices are reporting the required built-in metric data or sensor field values.

Alert Profiles can also be used to trigger workflow deployments automatically. To set this up, enable the workflow's deployment trigger, map the required alert profile, and then deploy the workflow in Trigger mode. For the complete steps, see Run a Workflow Automatically on an Alert (Enable Deployment Trigger).

View Generated Alerts

Generated alerts are available from the Alerts view. Use this view to:

• Review the affected device and alert priority
• Understand which metric, sensor field, or combined criteria triggered the alert
• Track when the alert was generated
• Investigate the impacted endpoints and start remediation actions

FAQ

Can I use sensor data in an alert profile?

Yes. Sensor fields can be selected from the metric picker after the relevant sensor has been created, deployed, and starts returning values.

Can I mix built-in metrics and sensor fields in the same profile?

Yes. You can create multi-condition profiles that combine built-in DEX metrics with sensor field based conditions and then control the evaluation with a criteria pattern.

Can I customize alert emails?

Yes. Use the notification customization dialog to edit the subject and body and insert supported alert variables.

Does Zia save the profile automatically?

No. Zia helps draft and refine the profile, but you should review the generated configuration before saving it.