topic Re: Blades not running alerts in Endpoint

Blades not running alerts

BorisL — Fri, 28 Apr 2023 07:43:32 GMT

Hi.

If I set, in Harmony Endpoint, the alert for blades not running to one device, every day I get dozens of alerts (I think false alerts) of blades not running (forensic, most often). I do no think that the numbers of devices affected is a reasonable parameter for alerts.

Anybody have a suggestion for alerts settings to make them effective to find real problems?

Re: Blades not running alerts

Chris_Atkinson — Fri, 28 Apr 2023 12:24:40 GMT

As a side do you notice the alerting is more or less effective for clients of a certain version and which version(s) are used in your deployment?

Re: Blades not running alerts

the_rock — Fri, 28 Apr 2023 23:45:13 GMT

We support large customer who uses harmony endpoint, so I can ask one of my colleagues about this, as Im not really endpoint guy myself. I know SIEM platform we use does fantastic job as far as alerts customer was looking for.

Re: Blades not running alerts

Chief_ts — Thu, 05 Dec 2024 08:04:44 GMT

Hi all,

I am having the same issue. the blades are enabled but they are greyed out and I get alerts

Re: Blades not running alerts

Chief_ts — Wed, 11 Dec 2024 12:25:47 GMT

Was this resolved guys?

Re: Blades not running alerts

BorisL — Thu, 12 Dec 2024 06:37:36 GMT

We still get alerts but fewer. usually when a user has been logged off the device for a long time. We are alerted that some blade is not running and a few minutes later we get the deactivation of alert. Seems reasonable, so I consider this resolved.