Create an Insights Rule

You must set up an insights rule to select the events for which notifications will be sent via notification channels. 

To create an Insights Rule, follow these steps:

1. Login to the JumpCloud Admin portal.

2. To view the alerts console, you can do any of the following:
   • In the left navigation pane, click Alerts.
   • On the home page, scroll down to the Open Alerts widget and click Go To Alerts Dashboard.
3. Click Rules to view the dashboard.
4. Click +Rule. This will take you to the Rule Management section with all the predefined rule templates.
5. Go to the Insights tab and click Rule For Event Based Alerts. You can also type the rule name in the Search bar.
6. Leave the Enabled button as is to activate the rule immediately after saving. You can switch the button to Disable if you prefer. 
7. Provide Rule Details:
   1. Rule Name: Enter a clear and concise name for your rule.
   2. Description: Document the purpose of the rule in the description field.
8. Use the Rule Priority dropdown to assign a priority level to the rule. This helps prioritize alerts and manage responses according to the severity of the issue. These options are available:
   • Low - Select this for alerts that are neither urgent nor highly important. They should receive fewer resources and can usually wait until they become more urgent.
   • Medium- Select this for alerts that are urgent but less important. They should receive a moderate allocation of resources.
   • High - Select this for alerts that are important and require immediate attention. They should receive the most resources to ensure they are addressed promptly.

9. In the Conditions section, select the events for which you want to send notifications.
   • You can use the Show Selected Events checkbox to view all the selected events at one go.
   • You can also Add additional attribute filters for each event to enhance your rule conditions. See Configure Event Attribute Filters to learn more.
10. You can configure the Actions section to either generate alerts, send notifications via configured channels, or both.  You must configure at least one of these options to create a rule.
    • (Optional) Use the Generate Alerts toggle to enable/disable alert generation in the JumpCloud console. When enabled this will generate alerts along with complete lifecycle tracking.
    • (Optional) Use the toggle button to Enable/Disable existing conditions. See Understanding Existing Conditions to learn more.
    • (Optional) Use the Send Notifications toggle to configure sending notifications to your pre-configured webhook or email channels.
      • Use the Search bar to search and select the channels that you want to send notifications to.
11. In the Additional Notifications section, select the checkbox for each action to enable notifications to the selected channels. This option is only available when both Generate Alerts and Send Notifications are enabled.
    • Alert Resolution: Notify all users in the selected channels when an alert from this rule is resolved.
    • Alert Acknowledgement: Email all users in the selected channels when an alert from this rule is acknowledged.

15. Click Save.

The rule will be activated and added to the Rules dashboard. If you want to Disable the rule or make any other modifications, see Use the Rules Dashboard to learn more. 

Once the rule is saved, every time the event selected in the Condition section occurs, an alert will be generated and the selected channels will receive notifications. You can view the alerts in the Alerts Dashboard. See Use the Alerts Dashboard to learn more about alerts.

Events: Insight Alerts

There are a number of events recorded in Directory Insights related to alerts and webhooks. Reference the table below for the Event Type and Description of the event as captured in Directory Insights. For more information on using Directory Insights, see View the Directory Insights Data Activity Log.

The following is a list of events that you see related to Insight Alerts.

Any modification to the connections (associations) between resources in JumpCloud, such as users to groups, or policies to devices are recorded under the single base event - association_change. While a list of prefiltered events is available for you to select from in the Conditions section of the Insights rule, the JSON data in the Directory Insights displays these changes (listed in the table below) under the single association_change event type.