Triggers are essentially sensors that react to certain events in a pre-defined way. They are used to execute the Server Task they are assigned to. They can be activated by the scheduler (time events) or when a certain system event occurs.

validation-status-icon-warning IMPORTANT

It is not possible to reuse a trigger. Each Server Task must be triggered with a separate trigger. Each trigger can run only one Server Task.

The trigger does not run newly assigned tasks immediately—the task is run as soon as the trigger is fired. Trigger sensitivity to events can be reduced further using throttling.

Server Trigger types:


Scheduled Once - This trigger is invoked once on the scheduled time. Can be delayed by random interval.

Daily - This trigger is invoked every selected day. You can set the start and end of the interval. For example, you can run a Server Task for ten consecutive weekends.  

Weekly - This trigger is invoked on a selected day in week. For example, run Server Task every Monday and Friday between 1. July and 31. August.

Monthly - This trigger is invoked on selected days in the selected week of a month, for the selected period of time. The Repeat on value sets on which of selected weekday in the month (eg. second monday) should the task run.

Yearly - This trigger is invoked every year (or more years, if so configured) on the specified start date.  



Random delay interval is available to be set for Scheduled type triggers. It defines the range of maximal delay for task execution. Randomizing can prevent overloading the server.


If John set the Server Task to trigger Weekly on Monday and Start on 2017 Feb 10 8:00:00, with Random delay interval set to 1 hour and end by set to 2017 Apr 6 00:00:00, the task would run with randomized 1 hour delay between 8:00 and 9:00 every Monday until the specified end date.

Dynamic Group

Dynamic Group Members Changed - This trigger is invoked when the contents of a Dynamic Group change. For example, if clients join or leave a specific Dynamic Group.

Dynamic Group Size Changed According to Threshold - This trigger is invoked when the number of clients in a Dynamic Group becomes higher or lower than the specified threshold. For example, if more than 100 computers are in a given group.

Dynamic Group Size Changed Over the Time Period - This trigger is invoked when the number of clients in a Dynamic Group changes over a defined time period. For example, if the number of computers in a given group increases by 10% in an hour.

Dynamic Group Size Changed According to Compared Group - This trigger is invoked when the number of clients in an observed Dynamic Group change according to a compared group (static or dynamic). For example, if more than 10% of all computers are infected (the group All compared to the group Infected).


Server Started - Is invoked when the server starts. For example, this trigger is used for the Static Group Synchronization task.

Event Log Trigger - This trigger is invoked when a certain event occurs in logs. For example, if there is a threat in the Scan log. This type of trigger provides a set of special settings in the Throttling settings.

CRON Expression -This trigger is invoked at a certain time and date.


Scheduled Trigger will run the task based on date and time settings. Tasks can be scheduled to run once, on a recurring basis, or on CRON expression.