Alerts monitoring requires that reporting data be collected and uploaded at regular intervals to give the most accurate picture of the current endpoint security environment. Unmanaged Security Clients do not provide reporting data, and are not included in the Alerts monitoring.
The following sections contain more information:
Reporting should be activated in each security policy. See Section 13.0, Configuring a Policy’s Compliance Reporting for details on setting up reporting for a security policy. Adjust report send times to an interval that gives you consistent updates on endpoint status. Additionally, an alert cannot activate without a report. Any activity you want to be alerted to must have an appropriate report assigned to it in the security policy.
By default, the ZENworks Endpoint Security Management Reporting Service synchronizes every 12 hours. This means that reporting and alerts data are not ready until 12 hours have passed from installation. To adjust this time, open the Configuration tool (see Configuring Data Synchronization Schedules) and adjust the Client Reporting time to the number of minutes appropriate for your needs and your environment.
When data is needed immediately, the Service Synchronization option in the Configuration tool immediately synchronizes the Policy Distribution Service (which collects the reporting data from the endpoints) and the Reporting Service, which updates all alerts based on the newly collected data. See Section 4.0, Forcing Data Synchronization for details.