How to Get Single Alert on Mass Objects Modification?

Question

How to configure settings of a single alert to be triggered by mass objects modification? For example, if a folder got deleted containing many files.

Answer

To get notified about mass objects modification with one Netwrix Alert, configure alert threshold.

For additional information on alerts thresholds, refer to the following article: Alerts — Create Alerts — v10.6.

1. On the Netwrix Auditor home page, click the Alerts setings link.
2. Select the alert you want to be triggered by mass objects removal and click Edit.
3. Navigate to Thresholds. When enabled, a single alert will be sent instead of many alerts. This can be helpful when Netwrix Auditor detects many activity records matching the filters you specified.
4. Configure threshold parameters as needed.