The
following table explains the important alerts triggered by events that require observation.
Deep Discovery Email
Inspector considers traffic surges,
suspicious message detections, hardware capacity changes, certain sandbox queue activity,
and component update issues as important events.
Important Alerts
|
Name
|
Criteria
(Default)
|
Checking Interval
(Default)
|
|
Suspicious Messages Identified
|
1 or more messages detected with threats
|
Once every 5 minutes
|
|
Watchlisted Recipients at Risk
|
1 or more messages detected with threats sent to watchlist
recipients
|
Once every 5 minutes
|
|
Quarantined Messages with Detected Threats
|
At least 10 messages quarantined
|
Once every 30 minutes
|
|
Long Message Delivery Queue
|
At least 500 messages in delivery queue
|
Once every 5 minutes
|
|
High CPU Usage
|
CPU usage is at least 90%
|
Once every 5 minutes
|
|
Long Virtual Analyzer Submission Queue
|
At least 20 messages in queue for Virtual Analyzer submission with a wait time of
5 minutes
|
Immediate
|
|
Long Virtual Analyzer Processing Time
|
Average Virtual Analyzer processing time is greater than 15
minutes
|
Once every hour
|
|
Low Free Disk Space
|
Disk space is 5GB or less
|
Once every 30 minutes
|
|
Component Update/Rollback Unsuccessful
|
An update/rollback was not successful
|
Immediate
|
|
Email Messages Timed Out Without Analysis Results
|
At least 1 email message timed out without analysis results
|
Once every 5 minutes
|
|
Email Message Encryption/Decryption Unsuccessful
|
At least 1 message with unsuccessful encryption or decryption
|
Once every 5 minutes
|
|
Low Free Threat Quarantine Disk Space
|
Free quarantine disk space left to store messages with detected
threats is 10% or less
|
Once every 30 minutes
|
|
High Memory Usage
|
Memory usage is at least 90%
|
Once every 5 minutes
|
|
Long Message Deferred Queue
|
At least 100 messages in deferred queue
|
Once every 5 minutes
|
|
Low Free Spam Quarantine Disk Space
|
Free quarantine disk space left to store spam messages is 10% or
less
|
Once every 30 minutes
|
|
Account Locked
|
One or more accounts have been locked
|
Immediate
|
|
Unsuccessful DKIM Signing
|
At least 5 messages with unsuccessful DKIM signing
|
Once every 5 minutes
|
|
Connection Issue
|
Unable to establish connection to a required resource
|
Once every 30 minutes
|