Actionable Alerts Knowledge Base and FAQs

Actionable Alert FAQs

Do templates have priority orders? How are the rules I've selected in my template(s) actually applied to Environments?

Templates can be ordered for priority. The same rule can be enabled in two separate templates. However, if those two separate templates have two different Destinations and were both applied to one Environment, then Liongard will only land the rule in the Destination of the template with the highest priority (lowest Order).

Please reference our How To Set Up Actionable Alerts Documentation for more information.

What does Active/Inactive mean?

If a template is "Inactive", it is disabled, and its rules will not generate alerts, even if applied to an Environment(s).

We recommend making a template Inactive before you're ready to start getting alerts.

Where do Alerts surface in Liongard?

Any template set to trigger alerts in Liongard will result in alerts displaying in two locations.

You can view your open alerts by navigating to the main dashboard screen, then selecting the Open Alerts tab or clicking into the section “Total Open Alerts”.

You can also view alerts in an Environment's Single Environment Dashboard.

I turned on a rule in a template, but I don't want tickets for this rule anymore. Can I turn the alert off?

Yes, you can turn the alert rule off. Navigate to Admin > Actionable Alerts > Templates > Select the Three Dots next to the Template > Edit the Template.

Find the rule you want to turn off and turn off the toggled in the "Enabled" column. Once you save the template, Liongard will no longer push any alerts for this rule to Liongard, your PSA, or Email inbox(es).

As a best practice, we also recommend deleting any tickets that the PSA already generated for this rule to avoid stale alerts. If you decide to turn the rule back on, this will enable Liongard to create a fresh alert in your PSA, instead of updating the stale ticket.

I changed the priority of a ticket in my PSA. Will Liongard change it back next time the inspection runs?

It depends. Liongard will only update the alert if its internal record of the alert needs updating, so if an inspection runs and Liongard determines that the priority of the alert has changed from Medium to High, it will also then update your alert in your PSA. However, if nothing changed on the Liongard side, it won't try and push anything to your PSA ticket.

I would like to exclude an Actionable Alert rule from one or more Environments, but I would still like the Actionable Alert rule to be applied to other Environments.

Actionable Alert rules can be silenced for specific systems. For more information, please review our documenation.

Alternatively, you may also choose to clone the template the rule is enabled by navigating to Admin > Actionable Alerts > Templates > Select the Clone button in the Actions Column. After the template is cloned, disable the Actionable Alert rule you do not want to trigger in the template. Save the template. Finally, remove the original template from the appropriate Environment(s) and apply the new template.

I received an Actionable Alert for "X," but when I look at the management interface for the system, the Actionable Alert should not have triggered.

Liongard Inspectors query systems from a variety of methods, such as a system's API, SSH, and/or Powershell. Once an inspection lands in Liongard, the data is stored in our Data Print, and Liongard scans the data for any changes and/or for the conditions enabled in our Actionable Alert rules.

There may be occasions where an inspection completes but not all queries are not successful. There may also be occasions where the information surfaced in the management interface of the system being inspected does not match that of our inspection method (ie: API or SSH). This indicates an issue with the system and not necessarily a Liongard error.

Do know that resolution may also require you to open a support ticket with the system vendor to determine why the data read from the inspection method does not match the management interface.