Skip to main content

 

Druva Documentation

Alerts

inSync Cloud Editions: File:/tick.png Elite Plus File:/tick.png Elite File:/cross.png Enterprise File:/tick.png Business

Overview

inSync Management Console displays a high-level view of alerts in your environment on the Manage Alerts page. Alerts indicate an exception situation or give an indication of a potential issue that needs attention. inSync displays alerts based on their severity so that administrators can address issues based on their severity and take appropriate action to resolve them. 

Alerts are processed periodically based on the respective alert interval. An alert is logged at the first instance and if the issue persists, the time and date of the same alert is updated for the subsequent instances.

Administrators can customize alert messages to provide actionable solutions to the subscribers. Customized messages and schedules of alerts are common for all administrator accounts and the change reflects for all administrators who can view or edit the alert message.

Widgets on the Manage Alerts page provide a snapshot of alerts based on alert severity, top alert types and alert activity over time. inSync also has the provision to mute an alert, without affecting its settings, to prevent the alert from generating any notifications.
inSync provides an option to collate emails for alerts of certain severity type and send it in a single mail communication at a configurable frequency. This saves the administrator’s mailbox from flooding with multiple emails of the same alert.

Refer About inSync Alerts, Manage Alerts, and Configure Alert Settings sections to know more on inSync alerts.

About inSync Alerts

The following table lists various inSync alert messages.

Alert Indicates that...

Backup stalled

Backup has been interrupted abruptly. No notification is generated for this alert.

Severity: Warning

Action required:  Rectify the reason the backup was stalled and initiate a manual backup.

Cache Storage Space Low 

Cloud cache storage space has been 90% consumed.

Severity: High

Action required: inSync administrator to increase storage for seamless usage of cloud cache. 

Cloud Apps Status 

inSync shows this alert due to any of the cloud apps issues on the user device.

Severity: Critical

Action required: Perform the required configurations specific to the cloud apps issue to resolve the alert.

DLP Autodelete Warning

inSync will delete data from the backup and share folders of a device after two days. This is based on the decommission/autodelete configuration in the Profile settings.

Severity: Notification

 Action required: The administrator must contact the inSync user who owns the device and ask the user to initiate a backup from the device. Else, inSync automatically deletes the data from the device.

Endpoint Encryption Failed

inSync failed to encrypt the data on endpoint device.

Severity: Critical

Following reasons can trigger this alert

  • Bad recovery policy - One or more data recovery agent certificates have expired.
  • No user keys found - Smart card containing the user keys is not inserted in the device.
  • Encrypting File System (EFS) is disabled - EFS is enabled on inSync Management Console but disabled in your domain configuration.

Action required:

Based on your configuration, do the following to resolve the alert:

  • Verify if any of the data recovery agent certificate has expired. If yes, obtain a new certificate.
  • If you have enabled smart card requirement for EFS, educate your users on how to obtain and use the smart card.
  • Verify if the EFS is enabled in your domain. To verify, follow these steps:
    1. Open the Group Policy Management.
    2. In the left-hand side panel, select the policy configured for EFS.
    3. Navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Public Key Policies > Encrypting File System .
    4. Right-click Encrypting File System and click Properties. Encrypting File System properties dialog box appears on the page.
    5. Verify your configuration, modify if required, and click OK.

In addition to the above actions, you can get well acquainted with best practices for EFS. For more information, see Best practices for the Encrypting File System

Initiating DLP Autodelete Now

 inSync is about to start the auto-delete of data from a device.

Severity: Notification

License Expiry

The inSync license is expired or is about to expire. 

Severity: Critical

Action required: Contact Druva Support or your account manager to renew your inSync license.

 Low Guest User License

The number of inSync users or inSync guest users has exceeded 80% of the licenses available. This alert appears only if you have inSync Share license.

Severity: High

Action required: Contact Druva Support to purchase additional user licenses. 

Low Storage Space Available

The storage assigned to your organization is almost full. 

Severity: High 

Action required: Delete older snapshots. Contact Druva Support to purchase more storage space.

Low User Storage Available

A user’s storage consumption is nearing the quota limit. For more information on user quota, see Assign user quota for data backup.

Severity: High

Action required: Increase the user quota or request the user to remove unnecessary files and folders. From the Profile settings, administrators can exclude the path to remove unnecessary folders from being backed up or exclude file extensions by using the Global Exclusion feature.

Misconfigured Backup Folder

 A folder is configured for backup, but it does not exist on a user device.

 Severity: Warning 

Action required: Review the profile configuration or user device configuration, and then remove the backup path or reconfigure accordingly.

 Only One Admin Configured 

There is only one cloud administrator account that is configured for your Cloud instance. 

Severity: Critical

Action required: Add at least one more inSync  Cloud administrator account. 

 Note: Only a Cloud Administrator can reset another Cloud or Profile administrator when required. 

 Outlook Misconfiguration 

This alert is generated is similar to Misconfigured Backup Folder alert.

Severity: Warning

This alert is generated in the following scenarios:

  • Outlook 2016/11 is configured on Mac and both the Outlook paths (2011 and 2016) are found to be missing.
  • Outlook 2011 is configured, and there is either only Outlook 2016 or NO outlook on the machine.
  • Action required: Update the appropriate Outlook path on inSync Client. 

 Preserved Users Limit Reached

You have breached the limit (110%) for maximum number of preserved users permitted and will no longer be able to place any more users in preserved state manually or through auto-preserve.

Severity: Critical

Action required: Do one of the following:

  • Purchase additional Preserved Users license.
    Contact Druva Support for purchasing additional Preserved Users license.
  • Delete users from your preserved users list.

Preserved Users Limit Reached - Warning

You have reached 107% of the total deployed users limit.

Severity: Critical

Action required: Do one of the following:

  • Purchase additional Preserved Users license.

  • Contact Druva Support for purchasing additional Preserved Users license.

  • Delete users from your preserved users list. 

Restore Status

 

The status of a restore activity.

Severity: Notification

Note: inSync administrator receives an email notification only when the restore is initiated by the administrator. inSync administrators will not receive email notifications for restores triggered by inSync users on their device or if they are performing a device replace activity.

Salesforce Backup Failed

Scheduled backup of Salesforce organization failed.

Severity: Warning

Salesforce Restore Status

The status of a restore activity for a Salesforce organization.

Severity: Notification

System, App Settings Backup Failed

inSync did not backup System and Application Settings (Persona settings).

Severity: Warning

Unusual Data Activity

Indicates anomalous behavior on a user device. Can be triggered if:

  • Large number of files are deleted
  • Large number of files are added
  • Large number of files are modified
  • Files are encrypted

Severity: High

Note: Unusual data activity is available for Elite Plus customers.

User Backup Inactivity

 

The user did not back up data from the user's device for a considerable period. This period is defined in the profile to which the user is associated.

Severity: Warning

Action required: Contact the user and ask him to initiate a backup from his device. Alternatively, trigger a backup of the user device from the inSync  Admin Console.

Unauthorized access

 inSync user tried to access inSync three consecutive times from outside your corporate network.

Severity: High

User Preservation Failed

inSync failed to preserve users because of insufficient Preserved Users license.

Severity: Critical

Action required:

Perform one of the following actions to remove this alert,

  • Purchase additional Preserved Users license.
    Contact Druva Support for purchasing additional Preserved Users license.
    OR
  • Delete users from your preserved users list.
SharePoint Backup Failed

Scheduled backup of SharePoint Site failed.

Severity: Warning

SharePoint Restore Status

The status of a restore activity for a SharePoint Site.

Severity: Notification

View alerts

To view the inSync alerts:

  • On the inSync Master Management Console menu bar, click alerts.png  icon.

Alerts are displayed on the Manage Alerts page. Alerts are distributed on the Recent and Older tabs based on their severity and time of generation.  
Refer to the Manage alerts section for an overview of the details displayed on the Manage Alerts page.

Alert intervals

All inSync alerts are displayed on the Manage Alerts page immediately when a condition qualifies for an alert.  The time and frequency of sending email notification about the alerts to its subscribers depends on:

  • Alert severity
  • Default notification schedule of the alert
  • Alert collate setting 

 If you have not configured collate, inSync initiates email notifications based on the default schedule of the alert. For information on configuring collate, see Collate all emails for this alert under Configure Alert Settings.
 
Use the following tables to know the approximate time in in which inSync initiates email notification for each alert. You can also see the impact of collate on notification schedule of inSync alerts.

Alert notifications without collate

In the following table:

  • The 1st Alert column shows the approximate time of email notification for each alert sent to its subscribers. 
  • The 2nd Alert column displays the default interval after which the second notification is mailed.

Note that collate is not configured for any inSync alert in this case.
 
For example, if Low Guest User License alert is generated for User A at 11 am:

  • Low Guest User License will be immediately displayed against the user name on the Manage Alerts dashboard.
  • First email notification for User A  is sent immediately. 
  • Second email notification for User A is mailed after 7 days, provided the alert condition is not resolved. 
Severity Alert name 1st Alert 2nd Alert
Critical Preserved Users Limit Reached Immediate 1 day
Endpoint Encryption Failed 2 days
License Expiry 1 day
Only One Admin Configured 1 day
       
High Cache Storage Space Low Immediate 1 day
Low Guest User License 7 days
Low Storage Space Available 1 day
Unauthorized access 1 day
Unusual data activity 1 day
       
Warning Low User Storage Space Available Immediate 1 day
Misconfigured Backup Folder 3 days
Preserved Users Limit Reached - Warning 1 day
Salesforce Backup Failed 1 day
System, App Settings Backup Failed 3 days
User Backup Inactivity 3 days
       
Notifications DLP Autodelete Warning 2 hours None
Initiating DLP Autodelete NOW 2 hours None
Restore Status Immediate on completion of restore None

Alert notifications with collate 

In the following table, the 1st and 2nd  Alert columns show the approximate time in which email notification for each alert. Since collate is configured, alert notifications are mailed based on the notification time configured in collate.
 
For example, if Low Guest User License alert is generated for User A at 11 am:

  • Low Guest User License will be immediately displayed against the user name on the Manage Alerts dashboard.
  • First and second email notifications for User A  will be sent according to the notification time configured in collate. 

Since collate can be configured only for High and Warning alerts, the schedule to Critical and Notification alerts will follow the default notification schedule. 

Severity Alert name 1st Alert 2nd Alert
Critical Preserved Users Limit Reached Immediate 1 day
Endpoint Encryption Failed 2 days
License Expiry 1 day
Only One Admin Configured 1 day
Preserved Users Limit Reached 1 day
       
High Cache Storage Space Low Collate schedule Collate schedule
Low Guest User License
Low Storage Space Available
Unauthorized access
Unusual data activity
       
Warning Low User Storage Space Available Immediate Collate schedule
Misconfigured Backup Folder
Preserved Users Limit Reached - Warning
Salesforce Backup Failed
System, App Settings Backup Failed
User Backup Inactivity
       
Notifications DLP Autodelete Warning 2 hours None
Initiating DLP Autodelete NOW 2 hours None
Restore Status Immediate on completion of restore None