No user groups are available.
Select “All users” to enable this alert or go to Users and create a group, and add users to it.
Apply this alert to all monitored
users.
A user who triggers the alert will be identified
in alert email (if enabled). To limit this alert
to specific user groups, choose “Selected user
groups.”
Select
one or more to activate the alert
User Group
Description
Group 1 (10/25/2015)
Word Processors, Data Entry,
Diagramming, and 2 others - 48 Users
Group 6 (10/25/2015)
IT Tools, Office, Social Networking
and 2 others - 15 Users
HR-EAST
East Coast Offices - 300 Users
HR-EAST
East Coast Offices - 300 Users
HR-West
Los Angeles - 5 Users
Amanda Rose
arose@mycompany.com
Ben Rose
brose@mycompany.com
Charlie Rose
George Ross
Glenda Frazier
Samantha Rose
srose@mycompany.com
London
London employees - 150 Users
New York Admin
New York Administrators - 30 Users
Amanda Rose
arose@mycompany.com
Ben Rose
brose@mycompany.com
Charlie Rose
George Ross
Glenda Frazier
Samantha Rose
srose@mycompany.com
Pacific Sales
Pacific Region Sales, Los Angeles - 15 Users
Select behavioral groups to add to this alert. The
groups will be imported as Veriato User Groups.
Behavioral
Groups
Activities
Group 1 (10/25/2015)
Word Processors, Data Entry,
Diagramming, and 2 others
Alice Sparks
Ben True
Charlie Finnegan
Dan Dixon
Gail Claire
Sam Tweed
48 users
Group 2 (10/25/2015)
Data Entry, Social Networking,
Sharepoint, and 3 others
Amanda Rose
Ben Rose
Charlie Rose
George Ross
Glenda Frazier
Samantha Rose
1167 users
Group 3 (10/25/2015)
Graphing, Programming, Office, and 2
others
3 Users
Group 4 (10/25/2015)
Graphing, Ridiculous Goofing Off,
Complicated Financial programs, and
2 others
Count and Sum fields have some limitations to OR combinations
None selected
Verifying... Verified Unverified
VERIFY VERIFY
Because of the way Event parsing works, you cannot join:
Count OR
A "Count of Events" condition can NOT be combined with "= matches" using an OR operator.
TIP: Click blue buttons to select the conditions that will trigger the alert. The default operator between multiple conditions is AND, with an option to switch to OR. If you need more options,
select Advanced when it appears.
TIP: For an Advanced query, type any of your selected condition letters with AND, OR, or ( ). There must be either an operator or a parenthesis
between each letter. Examples: (A AND B) OR (A AND D) or A AND (B OR C) AND D
Scan for alert conditions once a day. Accelerate screenshots applies only hourly.
Scan for alert conditions every hour.
Accelerate screenshotsAccelerate screenshots
All Recorders take continuous, frequent (but temporary) screenshots at a computer. This option requests the maximum screenshots for a brief period at the alert time.
This action will delete the alert policy. All email operators and keyword
groups will still be available.
Your Recon Keyword Alerts have been
upgraded!
The Default Recon Keyword Alert
has been renamed General Keywords and retains all previous settings. It
now applies to ALL users under Recon, even those covered by another alert.
To learn more about the new Anomaly Alerts click
here.
Note:
Event Alerts scan data returned by Veriato 360 Recorders. Each alert is based on one event type and can be set to trigger accelerated screenshots
(overriding the Recording Policy setting). Additional screenshots will use file storage disk space!
To receive alert notification, make sure email delivery is configured (in Global Options) and assign an Email Operator address in the alert "Action" panel.
