Overview
This article outlines the Druva Alert Severities based on Syslog Severity Numbers and lists specific alerts for which tickets are generated in ConnectWise, categorized by product.
Druva Alert Severities by Syslog Number
The following table lists Druva Alert Severeties categorised based on System Severity Number.
Syslog Severity Number | Druva Alert Severity |
0 | Critical |
1 | Critical |
2 | Critical |
3 | Warning |
4 | Warning |
5 | Informational |
6 | Informational |
7 | Informational |
ConnectWise Ticket Generation for Druva Alerts
The following table details the Druva Alerts for which tickets are generated in ConnectWise, along with their corresponding Syslog Severity.
Product Name | Syslog Severity | Alert Name |
Endpoints and SaaS Apps Alerts | 2 | AD Connection Status |
| 2 | Microsoft 365 Active License Limit Reached Threshold |
| 2 | Microsoft 365 Preserve License Limit Reached Threshold |
| 2 | Google Workspace Active License Limit Reaching Threshold |
| 2 | Endpoint Encryption Failed |
| 2 | Google Workspace Active License Limit Reached Threshold |
| 2 | License Expiry |
| 2 | Google Workspace Preserve License Limit Reached Threshold |
| 2 | SaaS Apps Status | Action required |
| 2 | Endpoints Active License Limit Reaching Threshold |
| 2 | Microsoft 365 Active License Limit Reaching Threshold |
| 2 | Endpoints Active License Limit Reached Threshold |
| 2 | Endpoints Preserve License Limit Reached Threshold |
| 3 | Low User Storage Space Available |
| 3 | Low Storage Space Available |
| 3 | Unauthorized access |
| 4 | Client application reported error |
| 4 | User Backup Inactivity |
| 4 | SharePoint Backup Failed |
| 4 | Backup Stalled |
| 4 | Google Shared Drives Backup Failed |
| 4 | Teams Backup Failed |
| 4 | User Preferred Data Location Changed |
| 4 | System, App Settings Backup Failed |
| 4 | SaaS Apps data lock disabled |
| 4 | Microsoft Dynamics 365 Backup Failed |
| 4 | Misconfigured Backup Folder |
| 4 | Groups Backup Failed |
| 4 | Public folder Backup Failed |
| 4 | SaaS Apps data lock will be disabled after 48 hrs |
| 6 | Microsoft Dynamics 365 Restore Status |
Cyber Resiliency | 3 | Data Access Alert - New Location |
| 3 | Unusual Data Activity |
| 4 | Admin Login Event - New Location |
Managed Service Providers Alerts | 4 | NonCompliantWorkload |
| 4 | NonCompliantMinBackupFrequencyLimit |
| 4 | NonCompliantMaxBackupFrequencyLimit |
| 4 | NonCompliantMinRetentionLimit |
| 4 | NonCompliantMaxRetentionLimit |
| 4 | CommercialLicenseExpiryReminderTenant |
| 2 | CommercialLicenseAboutToExpireTenant |
| 1 | CommercialLicenseExpiredTenant |
| 6 | CommercialLicenseRenewedTenant |
| 4 | POCLicenseExpiryReminder |
| 2 | POCLicenseAboutToExpire |
| 1 | POCLicenseExpired |
| 6 | POCLicenseRenewed |
| 4 | CreditUtilizationWarningTenant |
| 2 | CreditUtilizationCriticalTenant |
| 6 | CreditExpiryDateExtension |
| 1 | CustomerDeleted |
| 1 | TenantDeleted |
| 1 | TenantImmediateDeletionInitiated |
| 2 | TenantDeletionInitiated |
| 6 | TenantDeletionCancelled |
📝 Note
For detailed information about these alerts, refer to the following articles: