Alerts

If you want to be notified about suspicious activity, you can configure alerts that trigger on specific events. Auditor sends alerts after it detects the specified action. Alerts are helpful if you want to be notified about actions critical to your organization's security and need to mitigate risks when the suspicious action occurs.

Review the following topics about the Alerts functionality:

• See the Manage Alerts topic for additional information on how to edit and enable existing predefined alerts, and create new alerts based on the predefined ones.
• See the Create Alerts topic for additional information on how to create custom alerts with your personal filters.
• If you need to be alerted on specific events in your Event Logs or non-owner mailbox access attempts, see the Create Alerts for Event Log and Create Alerts for Non-Owner Mailbox Access Events topics for additional information.

The example alert is triggered when a new user is created in the monitored domain.

Tags

You can apply tags when creating an alert. Tags help you distinguish one alert from another or create groups of similar alerts.

The Tags page contains a complete list of alerts that exist in the product. You can't assign or create tags on this page.

To apply tags to an alert, navigate to alert settings and locate the Apply tags section on the General tab. See the Create Alerts topic for more information about applying tags.