Triggers and Throttling

Triggers are essentially sensors that react to certain events in a pre-defined way. They are used to execute the reports schedules they are assigned to. They can be activated by the scheduler (time events) or when a certain system event occurs.

important

Important

It is not possible to reuse a trigger. Each report schedule must be triggered with a separate trigger. Each trigger can run only one reports schedule.

The trigger does not run newly assigned report schedules immediately—the task is run as soon as the trigger is fired. Trigger sensitivity to events can be reduced further using throttling.

Trigger types:

Scheduled

Scheduled Once - This trigger is invoked once on the scheduled time.

Daily - This trigger is invoked every selected day. You can set the start and end of the interval. For example, you can run a report schedule for ten consecutive weekends.  

Weekly - This trigger is invoked on a selected day in week. For example, run report schedule every Monday and Friday between 1. July and 31. August.

Monthly - This trigger is invoked on selected days in the selected week of a month, for the selected period of time. The Repeat on value sets on which of selected weekday in the month (eg. second Monday) should the task run.

Yearly - This trigger is invoked every year (or more years, if so configured) on the specified start date.  

Dynamic Group

Dynamic Group Members Changed - This trigger is invoked when the contents of a Dynamic Group change. For example, if clients join or leave a specific Dynamic Group.

Dynamic Group Size Changed According to Threshold - This trigger is invoked when the number of clients in a Dynamic Group becomes higher or lower than the specified threshold. For example, if more than 100 computers are in a given group.

Dynamic Group Size Changed Over the Time Period - This trigger is invoked when the number of clients in a Dynamic Group changes over a defined time period. For example, if the number of computers in a given group increases by 10% in an hour.

Dynamic Group Size Changed According to Compared Group - This trigger is invoked when the number of clients in an observed Dynamic Group change according to a compared group (static or dynamic). For example, if more than 10% of all computers are infected (the group All compared to the group Problematic Computers).

Other

Event Log Trigger - This trigger is invoked when a certain event occurs in logs. For example, if there is a threat in the Scan log. This type of trigger provides a set of special settings in the Throttling settings.

CRON Expression -This trigger is invoked at a certain time and date.

 

Scheduled Trigger will run the task based on date and time settings. Tasks can be scheduled to run once, on a recurring basis, or on CRON expression.