Skip to main content

How can we help you?

Druva Documentation

Overview

Alerts indicate an exception situation or notify about a potential issue that needs attention. inSync Management Console displays a list of alerts raised by inSync in your environment on the Manage Alerts page. Alerts are sorted based on their severity to help administrators address critical issues on priority.

Whenever inSync raises an alert, email notifications are sent to the administrators. inSync users also receive email notifications if its resolution involves a user intervention or when the administrator has added them to the notification list of a specific alert. If the alert remains unresolved, subsequent notification emails are sent based on the default interval defined for each alert.

From the Manage Alerts page, administrators can:

  • View alert summary in widgets
  • Customize alert notifications
  • Collate alert notifications and send them as a single email
  • Mute and unmute alerts
  • Add and remove alert notification subscribers

Refer About inSync Alerts, Manage Alerts, and Configure Alert Settings sections to know more on inSync alerts.

About inSync Alerts

The following table lists various inSync alert messages.

Alert Indicates that...
AD Connection Status

inSync Connector configured in your environment is not connected to inSync Cloud.

Severity: Critical

Action required: Check the connection status of inSync Connector.

AD/LDAP Authentication Failure

The credentials used to connect with the configured AD or LDAP account are either invalid or expired.

Severity: Critical

Action required: Update the credentials used to connect to AD or LDAP account.

Backup stalled

Backup has been interrupted abruptly. No notification is generated for this alert.

Severity: Warning

Action required: Rectify the reason the backup was stalled and initiate a manual backup.

Cache Server Connection Status

inSync CloudCache Server configured in your environment is not connected to inSync Cloud.

Severity: Critical

Action required: Check the connection status of inSync CloudCache Server.

Cache Storage Space Low 

Cloud cache storage space has been 90% consumed.

Severity: High

Action required: administrator to increase storage for seamless usage of cloud cache. 

Cloud Apps Status 

inSync shows this alert due to any of the cloud apps issues on the user device.

Severity: Critical

Action required: Perform the required configurations specific to the cloud apps issue to resolve the alert.

DLP Autodelete Warning

inSync will delete data from the backup and share folders of a device after two days. This is based on the decommission/autodelete configuration in the Profile settings.

Severity: Notification

 Action required: The administrator must contact the inSync user who owns the device and ask the user to initiate a backup from the device. Else, inSync automatically deletes the data from the device.

Endpoint Encryption Failed

inSync failed to encrypt the data on endpoint device.

Severity: Critical

Following reasons can trigger this alert

  • Bad recovery policy - One or more data recovery agent certificates have expired.
  • No user keys found - Smart card containing the user keys is not inserted in the device.
  • Encrypting File System (EFS) is disabled - EFS is enabled on inSync Management Console but disabled in your domain configuration.

Action required:

Based on your configuration, do the following to resolve the alert:

  • Verify if any of the data recovery agent certificate has expired. If yes, obtain a new certificate.
  • If you have enabled smart card requirement for EFS, educate your users on how to obtain and use the smart card.
  • Verify if the EFS is enabled in your domain. To verify, follow these steps:
    1. Open the Group Policy Management.
    2. In the left-hand side panel, select the policy configured for EFS.
    3. Navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Public Key Policies > Encrypting File System .
    4. Right-click Encrypting File System and click Properties. Encrypting File System properties dialog box appears on the page.
    5. Verify your configuration, modify if required, and click OK.

In addition to the above actions, you can get well acquainted with best practices for EFS.

Endpoints Active License Limit Reached Threshold

You have consumed 100% of your Endpoints Active Licenses. To protect more users, contact Support to procure additional licenses.

Severity: Critical

Action required: Do one of the following:

Note: Removing a license will delete devices along with backed up data.

 

For detailed information about how active license is consumed, see Active License rationale.

Endpoints Active License Limit Reaching Threshold

You have consumed 95% of your Endpoints Active Licenses. Please contact Support to procure additional licenses.

Severity: Critical

Action required: Do one of the following:

Note: Removing a license will delete devices along with backed up data.

 

For detailed information about how an active license is consumed, see active License rationale.

Endpoints Preserved License Limit Reached Threshold

You have consumed 100% of your Endpoints preserve licenses. To preserve more users, contact Support to procure additional preserve licenses.

Severity: Critical

Action required: Contact Support to purchase additional Endpoint preserved licenses.

For detailed information about how preserve license is consumed, see Preserve License rationale.

Microsoft 365 Active License Limit Reached Threshold

You have consumed 100% of your Microsoft 365 active licenses. To protect more users, contact Support to procure additional licenses.

For detailed information about how preserve license is consumed, see Preserve License rationale.

Severity: Critical

Action required: Do one of the following:

Note: Removing a license will delete devices along with backed up data.

 

Microsoft 365 Active License Limit Reaching Threshold

You have consumed 95% of your Microsoft 365 active licenses. Please contact Support to procure additional licenses.

Severity: Critical

Action required: Do one of the following:

Note: Removing a license will delete devices along with backed up data.

For detailed information about how an active license is consumed, see Active License rationale.

Microsoft 365 Preserved License Limit Reached Threshold

You have consumed 100% of your Microsoft 365 preserve licenses. To preserve more users, contact Support to procure additional preserve licenses.

Severity: Critical

Action required: Contact Support to purchase additional Microsoft 365 preserved licenses.

For detailed information about how preserve license is consumed, see Preserve License rationale.

Google Workspace Active License Limit Reached Threshold

You have consumed 100% of your Google Workspace active licenses. To protect more users, contact Support to procure additional licenses.

Severity: Critical

Action required: Do one of the following:

Note: Removing a license will delete devices along with backed up data.

For detailed information about how active license is consumed, see Active License rationale.

Google Workspace Active License Limit Reaching Threshold

You have consumed 95% of your Google Workspace active licenses. Please contact Support to procure additional licenses.

Severity: Critical

Action required: Do one of the following:

Note: Removing a license will delete devices along with backed up data.

For detailed information about how an active license is consumed, see Active License rationale.

Google Workspace Preserved License Limit Reached Threshold

You have consumed 100% of your Google Workspace preserve licenses. To preserve more users, contact Support to procure additional preserve licenses.

Severity: Critical

Action required: Contact Support to purchase additional Google Workspace preserve licenses.

For detailed information about how preserve license is consumed, see Preserve License rationale.

Initiating DLP Autodelete Now

 inSync is about to start the auto-delete of data from a device.

Severity: Notification

License Expiry

The inSync license is expired or is about to expire. 

Severity: Critical

Action required: Contact Support or your account manager to renew your inSync license.

 Low Guest User License

The number of inSync users or inSync guest users has exceeded 80% of the licenses available. This alert appears only if you have inSync Share license.

Severity: High

Action required: Contact Druva Support to purchase additional user licenses. 

Low Storage Space Available

The storage assigned to your organization is almost full. 

Severity: High 

Action required: Delete older snapshots. Contact Support to purchase more storage space.

Low User Storage Available

A user’s storage consumption is nearing the quota limit. For more information on user quota, see Assign user quota for data backup.

Severity: High

Action required: Increase the user quota or request the user to remove unnecessary files and folders. From the Profile settings, administrators can exclude the path to remove unnecessary folders from being backed up or exclude file extensions by using the Global Exclusion feature.

Misconfigured Backup Folder

 A folder is configured for backup, but it does not exist on a user device.

 Severity: Warning 

Action required: Review the profile configuration or user device configuration, and then remove the backup path or reconfigure accordingly.

 Only One Admin Configured 

There is only one cloud administrator account that is configured for your Cloud instance. 

Severity: Critical

Action required: Add at least one more inSync Cloud administrator account. 

Note: Only a Cloud Administrator can reset another Cloud or Profile administrator when required. 

 Outlook Misconfiguration 

This alert is generated is similar to Misconfigured Backup Folder alert.

Severity: Warning

This alert is generated in the following scenarios:

  • Outlook 2016/11 is configured on Mac and both the Outlook paths (2011 and 2016) are found to be missing.
  • Outlook 2011 is configured, and there is either only Outlook 2016 or NO outlook on the machine.
  • Action required: Update the appropriate Outlook path on inSync Client. 

Restore Status

 

The status of a restore activity.

Severity: Notification

Note: Administrator receives an email notification only when the restore is initiated by the administrator. They will not receive email notifications for restores triggered by inSync users on their device or if they are performing a device replace activity.

Salesforce Backup Failed

Scheduled backup of Salesforce organization failed.

Severity: Warning

Salesforce Restore Status

The status of a restore activity for a Salesforce organization.

Severity: Notification

System, App Settings Backup Failed

inSync did not backup System and Application Settings (Persona settings).

Severity: Warning

Unusual Data Activity

Indicates anomalous behavior on a user device. Can be triggered if:

  • Large number of files are deleted
  • Large number of files are added
  • Large number of files are modified
  • Files are encrypted

Severity: High

Note: Unusual data activity is available for Elite Plus customers.

User Backup Inactivity

 

The user did not back up data from the user's device for a considerable period. This period is defined in the profile to which the user is associated.

Severity: Warning

Action required: Contact the user and ask him to initiate a backup from his device. Alternatively, trigger a backup of the user device from the inSync Management Console.

 No backup inactivity alerts are generated if the device is disabled. 

Unauthorized access

 inSync user tried to access inSync three consecutive times from outside your corporate network.

Severity: High

SharePoint Backup Failed

Scheduled backup of SharePoint Site failed.

Severity: Warning

SharePoint Restore Status

The status of a restore activity for a SharePoint Site.

Severity: Notification

SharePoint Site Geo Location Changed

The geo location has changed for your SharePoint site(s). 

Severity: Warning

Action required: Update the storage as per the Multi-Geo storage mapping settings. For more information, see Multi-Geo Support for SharePoint Online and Teams.
SharePoint Multi-Geo Storage Mapping Not Defined

The storage mapping is pending for your SharePoint site(s) after the geo location update.

Severity: Critical

Action required: Map the storage in the Multi-Geo Storage Mapping settings. For more information, see Multi-Geo Support for SharePoint Online and Teams.

User Preferred Data Location Changed

The Preferred Data Location (PDL) for an Exchange Online or OneDrive user has changed.

Severity: Warning

Action required: Update the storage for the user. For more information about changing storage for a user, see Change storage assigned to a user.
App Access Revoked

The access to a specific app is revoked.

Severity: Notification

View alerts

To view the inSync alerts:

  • On the inSync Management Console menu bar, click Notification.jpg icon.
    inSync displays a count of all recent alerts on the Notification.jpg icon.

Alerts are displayed on the Manage Alerts page. Alerts are distributed on the Recent and Older tabs based on their severity and time of generation.
Refer to the Manage alerts section for an overview of the details displayed on the Manage Alerts page.

Alert notifications

inSync alerts appear on the Manage Alerts page when a condition qualifies for an alert. Administrators and users added to the notification list of the alert are alerted through email notifications about the alert. If the alert remains unresolved, inSync sends reminder email notifications based on:

  • The default notification schedule of the alert
  • The collate setting of the alert

The collate setting enables administrators to consolidate all the notifications of a single alert and send them in a single email. Collate can be enabled only for alerts with severity type High and Warning.

For information on configuring collate, see Collate all emails for this alert under Configure Alert Settings.
 

Alert notifications stop for a non-critical alert only when the alert is older than 14 days.

The following tables provide the notification schedule for each alert raised in inSync.

Default alert notification schedule

The following table indicates the default alert notification schedule (with Collate disabled) of each alert. The Reminder notification column indicates the frequency at which reminder emails are sent until the alert is either resolved or becomes older than 14 days. In case of critical alerts, inSync keeps sending reminders until the alert is resolved.

 

Severity Alert name First Alert Reminder Notifications
Critical Endpoint Active License Limit Reached Threshold Immediate Daily
Microsoft 365 Active License Limit Reached Threshold Daily
Google Workspace Active License Limit Reached Threshold Daily
Endpoint Active License Limit Reaching Threshold Daily
Microsoft 365 Active License Limit Reaching Threshold Daily
Google Workspace Active License Limit Reaching Threshold Daily
Endpoint Preserved License Limit Reached Threshold Daily
Microsoft 365 Preserved License Limit Reached Threshold Daily
Google Workspace Preserved License Limit Reached Threshold Daily
Endpoint Encryption Failed Every 2 days
License Expiry Daily
Only One Admin Configured Daily
AD Connection Status Daily
Cache Server Connection Status Daily
AD/LDAP Authentication Failure Daily
SharePoint Multi-Geo Storage Mapping Not Defined Daily
       
High Cache Storage Space Low Immediate Daily
Low Guest User License Weekly
Low Storage Space Available Daily
Unauthorized access Daily
Unusual data activity Daily
       
Warning Low User Storage Space Available Immediate Daily
Misconfigured Backup Folder Every 3 days
Salesforce Backup Failed Daily
System, App Settings Backup Failed Every 3 days
User Backup Inactivity Every 3 days
SharePoint Backup Failed Weekly
SharePoint Site Geo Location Changed As per the schedule defined in the alert settings.
User Preferred Data Location Changed As per the schedule defined in the alert settings.
       
Notifications DLP Autodelete Warning 2 hours None
Initiating DLP Autodelete NOW 2 hours None
Restore Status Immediate on completion of restore None
SharePoint Restore Status Immediate on completion of restore None
App Access Revoked Immediate None

 

Severity Alert name First Alert Reminder Notifications
Critical Preserved Users Limit Reached Immediate Daily
Endpoint Encryption Failed Every 2 days
License Expiry Daily
Only One Admin Configured Daily
AD Connection Status Daily
Cache Server Connection Status Daily
AD/LDAP Authentication Failure Daily
User Preservation Failed None
SharePoint Multi-Geo Storage Mapping Not Defined Daily
       
High Cache Storage Space Low Immediate Daily
Low Guest User License Weekly
Low Storage Space Available Daily
Unauthorized access Daily
Unusual data activity Daily
       
Warning Low User Storage Space Available Immediate Daily
Misconfigured Backup Folder Every 3 days
Salesforce Backup Failed Daily
System, App Settings Backup Failed Every 3 days
User Backup Inactivity Every 3 days
SharePoint Backup Failed Weekly
SharePoint Site Geo Location Changed As per the schedule defined in the alert settings.
User Preferred Data Location Changed As per the schedule defined in the alert settings.
       
Notifications DLP Autodelete Warning 2 hours None
Initiating DLP Autodelete NOW 2 hours None
Restore Status Immediate on completion of restore None
SharePoint Restore Status Immediate on completion of restore None
App Access Revoked Immediate None

For more information, see Configure Alert Settings

Alert notifications with Collate enabled

The following table indicates how the alert notification schedule is impacted when Collate is configured for the alerts. Since Collate can be configured only for alerts with severity type High and Warning, the notification schedule of Critical and Notification alerts does not get impacted.

Severity Alert name 1st Alert 2nd Alert
Critical Preserved Users Limit Reached Immediate Daily
Endpoint Active License Limit Reached Threshold Daily
Microsoft 365 Active License Limit Reached Threshold Daily
Google Workspace Active License Limit Reached Threshold Daily
Endpoint Active License Limit Reaching Threshold Daily
Google Workspace Active License Limit Reaching Threshold Daily
Microsoft 365 Active License Limit Reaching Threshold Daily
Endpoint Preserved License Limit Reached Threshold Daily
Microsoft 365 Preserved License Limit Reached Threshold Daily
Google Workspace Preserved License Limit Reached Threshold Daily
   
Endpoint Encryption Failed Every 2 days
License Expiry Daily
Only One Admin Configured Daily
AD Connection Status Daily
Cache Server Connection Status Daily
AD/LDAP Authentication Failure Daily
SharePoint Multi-Geo Storage Mapping Not Defined Daily
       
High Cache Storage Space Low Collate schedule Collate schedule
Low Guest User License
Low Storage Space Available
Unauthorized access
Unusual data activity
       
Warning Low User Storage Space Available Immediate Collate schedule
Misconfigured Backup Folder
Salesforce Backup Failed
System, App Settings Backup Failed
User Backup Inactivity
SharePoint Backup Failed
SharePoint Site Geo Location Changed As per the schedule defined in the alert settings.
User Preferred Data Location Changed As per the schedule defined in the alert settings.
       
Notifications DLP Autodelete Warning 2 hours None
Initiating DLP Autodelete NOW 2 hours None
Restore Status Immediate on completion of restore None
SharePoint Restore Status immediate on completion of restore None
App Access Revoked Immediate None

For more information, see Configure Alert Settings.