Important Alerts Parent topic

The following table explains the important alerts triggered by events that require observation. TippingPoint Advanced Threat Protection Analyzer considers suspicious object detections, hardware capacity changes, certain sandbox queue activity, component update, account and clustering issues as important problems.

Important Alerts

Name
Criteria
(Default)
Alert Frequency
(Default)
Account Locked
An account was locked because of multiple unsuccessful logon attempts.
Immediate
Long Virtual Analyzer Queue
The Virtual Analyzer queue has exceeded the specified threshold.
Once every 30 minutes
Component Update Unsuccessful
A component update was unsuccessful.
Once every 30 minutes
High CPU Usage
The average CPU usage in the last 5 minutes has exceeded the specified threshold.
Once every 30 minutes
High Memory Usage
The average memory usage in the last 5 minutes has exceeded the specified threshold.
Once every 30 minutes
High Disk Usage
The disk usage has exceeded the specified threshold.
Once every 30 minutes
Secondary Appliance Unresponsive
A secondary appliance in the cluster encountered an error and was unable to recover.
Immediate
High Availability Suspended
The passive primary appliance encountered an error and was unable to recover. High availability was suspended.
Once every 30 minutes
New High-Risk Objects Identified
The number of new high-risk objects identified over the specified time period has reached the specified threshold.
Immediate