Alerts indicate an exception situation or notify about a potential issue that needs attention. inSync Management Console displays a list of alerts raised by inSync in your environment on the Manage Alerts page. Alerts are sorted based on their severity to help administrators address critical issues on priority.

Whenever inSync raises an alert, email notifications are sent to the administrators. inSync users also receive email notifications if its resolution involves a user intervention or when the administrator has added them to the notification list of a specific alert. If the alert remains unresolved, subsequent notification emails are sent based on the default interval defined for each alert.

From the Manage Alerts page, administrators can:

View alert summary in widgets
Customize alert notifications
Collate alert notifications and send them as a single email
Mute and unmute alerts
Add and remove alert notification subscribers

Refer About inSync Alerts, Manage Alerts, and Configure Alert Settings sections to know more on inSync alerts.

About inSync Alerts

The following table lists various inSync alert messages.

Alert	Indicates that...
AD Connection Status	inSync Connector configured in your environment is not connected to inSync Cloud. Severity:Critical Action required:Check the connection status of inSync Connector.
AD/LDAP Authentication Failure	The credentials used to connect with the configured AD or LDAP account are either invalid or expired. Severity: Critical Action required: Update the credentials used to connect to AD or LDAP account.
Backup stalled	Backup has been interrupted abruptly. No notification is generated for this alert. Severity:Warning Action required: Rectify the reason the backup was stalled and initiate a manual backup.
Cache Server Connection Status	inSync CloudCache Server configured in your environment is not connected to inSync Cloud. Severity:Critical Action required:Check the connection status of inSync CloudCache Server.
Cache Storage Space Low	Cloud cache storage space has been 90% consumed. Severity:High Action required: administrator to increase storage for seamless usage of cloud cache.
Cloud Apps Status	inSync shows this alert due to any of the cloud apps issues on the user device. Severity:Critical Action required:Perform the required configurations specific to the cloud apps issue to resolve the alert.
DLP Autodelete Warning	inSync will delete data from the backup and share folders of a device after two days. This is based on the decommission/autodelete configuration in the Profile settings. Severity:Notification Action required:The administrator must contact the inSync user who owns the device and ask the user to initiate a backup from the device. Else, inSync automatically deletes the data from the device.
Endpoint Encryption Failed	inSync failed to encrypt the data on endpoint device. Severity:Critical Following reasons can trigger this alert Bad recovery policy - One or more data recovery agent certificates have expired. No user keys found - Smart card containing the user keys is not inserted in the device. Encrypting File System (EFS) is disabled - EFS is enabled on inSync Management Console but disabled in your domain configuration. Action required: Based on your configuration, do the following to resolve the alert: Verify if any of the data recovery agent certificate has expired. If yes, obtain a new certificate. If you have enabled smart card requirement for EFS, educate your users on how to obtain and use the smart card. Verify if the EFS is enabled in your domain. To verify, follow these steps: Open the Group Policy Management. In the left-hand side panel, select the policy configured for EFS. Navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Public Key Policies > Encrypting File System. Right-click Encrypting File System and click Properties. Encrypting File System properties dialog box appears on the page. Verify your configuration, modify if required, and click OK. In addition to the above actions, you can get well acquainted with best practices for EFS.
Endpoints Active License Limit Reached Threshold	You have consumed 100% of your Endpoints Active Licenses. To protect more users, contact Support to procure additional licenses. Severity:Critical Action required:Do one of the following: Contact Support to purchase additional Endpoints Active licenses. Preserve the existing active users. Remove the license of the existing active users. 📝 Note Removing a license will delete devices along with backed up data. For detailed information about how active license is consumed, see Active License rationale.
Endpoints Active License Limit Reaching Threshold	You have consumed 95% of your Endpoints Active Licenses. Please contact Support to procure additional licenses. Severity:Critical Action required:Do one of the following: Contact Support to purchase additional Endpoints Active licenses. Preserve the existing active users. Remove the license of the existing active users. 📝 Note Removing a license will delete devices along with backed up data. For detailed information about how an active license is consumed, see active License rationale.
Endpoints Preserved License Limit Reached Threshold	You have consumed 100% of your Endpoints preserve licenses. To preserve more users, contact Support to procure additional preserve licenses. Severity:Critical Action required:Contact Support to purchase additional Endpoint preserved licenses. For detailed information about how preserve license is consumed, see Preserve License rationale.
Microsoft 365 Active License Limit Reached Threshold	You have consumed 100% of your Microsoft 365 active licenses. To protect more users, contact Support to procure additional licenses. For detailed information about how preserve license is consumed, see Preserve License rationale. Severity:Critical Action required:Do one of the following: Contact Support to purchase additional Microsoft 365 Active licenses. Preserve the existing active users. Remove the license of the existing active users. 📝 Note Removing a license will delete devices along with backed up data.
Microsoft 365 Active License Limit Reaching Threshold	You have consumed 95% of your Microsoft 365 active licenses. Please contact Support to procure additional licenses. Severity:Critical Action required:Do one of the following: Contact Support to purchase additional Microsoft 365 Active licenses. Preserve the existing active users. Remove the license of the existing active users. 📝 Note Removing a license will delete devices along with backed up data. For detailed information about how an active license is consumed, see Active License rationale.
Microsoft 365 Preserved License Limit Reached Threshold	You have consumed 100% of your Microsoft 365 preserve licenses. To preserve more users, contact Support to procure additional preserve licenses. Severity:Critical Action required:Contact Support to purchase additional Microsoft 365 preserved licenses. For detailed information about how preserve license is consumed, see Preserve License rationale.
Google Workspace Active License Limit Reached Threshold	You have consumed 100% of your Google Workspace active licenses. To protect more users, contact Support to procure additional licenses. Severity:Critical Action required:Do one of the following: Contact Support to purchase additional Google Workspace Active licenses. Preserve the existing active users. Remove the license of the existing active users. 📝 Note Removing a license will delete devices along with backed up data. For detailed information about how active license is consumed, see Active License rationale.
Google Workspace Active License Limit Reaching Threshold	You have consumed 95% of your Google Workspace active licenses. Please contact Support to procure additional licenses. Severity:Critical Action required:Do one of the following: Contact Support to purchase additional Google Workspace Active licenses. Preserve the existing active users. Remove the license of the existing active users. 📝 Note Removing a license will delete devices along with backed up data. For detailed information about how an active license is consumed, see Active License rationale.
Google Workspace Preserved License Limit Reached Threshold	You have consumed 100% of your Google Workspace preserve licenses. To preserve more users, contact Support to procure additional preserve licenses. Severity:Critical Action required:Contact Support to purchase additional Google Workspace preserve licenses. For detailed information about how preserve license is consumed, see Preserve License rationale.
Initiating DLP Autodelete Now	inSync is about to start the auto-delete of data from a device. Severity:Notification
License Expiry	The inSync license is expired or is about to expire. Severity:Critical Action required:Contact Support or your account manager to renew your inSync license.
Low Guest User License	The number of inSync users or inSync guest users has exceeded 80% of the licenses available. This alert appears only if you have inSync Share license. Severity:High Action required: Contact Druva Support to purchase additional user licenses.
Low Storage Space Available	The storage assigned to your organization is almost full. Severity:High Action required:Delete older snapshots. Contact Support to purchase more storage space.
Low User Storage Available	A user’s storage consumption is nearing the quota limit. For more information on user quota, see Assign user quota for data backup. Severity:High Action required:Increase the user quota or request the user to remove unnecessary files and folders. From the Profile settings, administrators can exclude the path to remove unnecessary folders from being backed up or exclude file extensions by using the Global Exclusion feature.
Misconfigured Backup Folder	A folder is configured for backup, but it does not exist on a user device. Severity:Warning Action required:Review the profile configuration or user device configuration, and then remove the backup path or reconfigure accordingly.
Only One Admin Configured	There is only one cloud administrator account that is configured for your Cloud instance. Severity:Critical Action required:Add at least one more inSync Cloud administrator account. 📝 Note Only a Cloud Administrator can reset another Cloud or Profile administrator when required.
Outlook Misconfiguration	This alert is generated is similar to Misconfigured Backup Folder alert. Severity:Warning This alert is generated in the following scenarios: Outlook 2016/11 is configured on Mac and both the Outlook paths (2011 and 2016) are found to be missing. Outlook 2011 is configured, and there is either only Outlook 2016 or NO outlook on the machine. Action required: Update the appropriate Outlook path on inSync Client.
Restore Status	The status of a restore activity. Severity:Notification 📝 Note Administrator receives an email notification only when the restore is initiated by the administrator. They will not receive email notifications for restores triggered by inSync users on their device or if they are performing a device replace activity.
Salesforce Backup Failed	Scheduled backup of Salesforce organization failed. Severity:Warning
Salesforce Restore Status	The status of a restore activity for a Salesforce organization. Severity:Notification
System, App Settings Backup Failed	inSync did not backup System and Application Settings (Persona settings). Severity:Warning
Unusual Data Activity	Indicates anomalous behavior on a user device. Can be triggered if: Large number of files are deleted Large number of files are added Large number of files are modified Files are encrypted Severity: High 📝 Note Unusual data activity is available for Elite Plus customers.
User Backup Inactivity	The user did not back up data from the user's device for a considerable period. This period is defined in the profile to which the user is associated. Severity:Warning Action required:Contact the user and ask him to initiate a backup from his device. Alternatively, trigger a backup of the user device from the inSync Management Console. ❗ Important No backup inactivity alerts are generated if the device is disabled.
Unauthorized access	inSync user tried to access inSync three consecutive times from outside your corporate network. Severity:High
SharePoint Backup Failed	Scheduled backup of SharePoint Site failed. Severity:Warning
SharePoint Restore Status	The status of a restore activity for a SharePoint Site. Severity:Notification
SharePoint Site Geo Location Changed	The geo location has changed for your SharePoint site(s). Severity:Warning Action required:Update the storage as per the Multi-Geo storage mapping settings. For more information, see Multi-Geo Support for SharePoint Online and Teams.
SharePoint Multi-Geo Storage Mapping Not Defined	The storage mapping is pending for your SharePoint site(s) after the geo location update. Severity:Critical Action required:Map the storage in the Multi-Geo Storage Mapping settings. For more information, see Multi-Geo Support for SharePoint Online and Teams.
User Preferred Data Location Changed	The Preferred Data Location (PDL) for an Exchange Online or OneDrive user has changed. Severity: Warning Action required:Update the storage for the user. For more information about changing storage for a user, see Change storage assigned to a user.
App Access Revoked	The access to a specific app is revoked. Severity: Notification

View alerts

To view the inSync alerts:

On the inSync Management Console menu bar, click ❌ icon.
inSync displays a count of all recent alerts on the ❌ icon.

Alerts are displayed on the Manage Alerts page. Alerts are distributed on the Recent and Older tabs based on their severity and time of generation.
Refer to the Manage alerts section for an overview of the details displayed on the Manage Alerts page.

Alert notifications

inSync alerts appear on the Manage Alerts page when a condition qualifies for an alert. Administrators and users added to the notification list of the alert are alerted through email notifications about the alert. If the alert remains unresolved, inSync sends reminder email notifications based on:

The default notification schedule of the alert
The collate setting of the alert

The collate setting enables administrators to consolidate all the notifications of a single alert and send them in a single email. Collate can be enabled only for alerts with severity type High and Warning.

For information on configuring collate, see Collate all emails for this alert under Configure Alert Settings.

💡 Tip

Alert notifications stop for a non-critical alert only when the alert is older than 14 days.

The following tables provide the notification schedule for each alert raised in inSync.

Default alert notification schedule

The following table indicates the default alert notification schedule (with Collate disabled) of each alert. The Reminder notification column indicates the frequency at which reminder emails are sent until the alert is either resolved or becomes older than 14 days. In case of critical alerts, inSync keeps sending reminders until the alert is resolved.

Severity	Alert name	First Alert	Reminder Notifications
Critical	Endpoint Active License Limit Reached Threshold	Immediate	Daily
Microsoft 365 Active License Limit Reached Threshold	Daily
Google Workspace Active License Limit Reached Threshold	Daily
Endpoint Active License Limit Reaching Threshold	Daily
Microsoft 365 Active License Limit Reaching Threshold	Daily
Google Workspace Active License Limit Reaching Threshold	Daily
Endpoint Preserved License Limit Reached Threshold	Daily
Microsoft 365 Preserved License Limit Reached Threshold	Daily
Google Workspace Preserved License Limit Reached Threshold	Daily
Endpoint Encryption Failed	Every 2 days
License Expiry	Daily
Only One Admin Configured	Daily
AD Connection Status	Daily
Cache Server Connection Status	Daily
AD/LDAP Authentication Failure	Daily
SharePoint Multi-Geo Storage Mapping Not Defined	Daily

High	Cache Storage Space Low	Immediate	Daily
Low Guest User License	Weekly
Low Storage Space Available	Daily
Unauthorized access	Daily
Unusual data activity	Daily

Warning	Low User Storage Space Available	Immediate	Daily
Misconfigured Backup Folder	Every 3 days
Salesforce Backup Failed	Daily
System, App Settings Backup Failed	Every 3 days
User Backup Inactivity	Every 3 days
SharePoint Backup Failed	Weekly
SharePoint Site Geo Location Changed	As per the schedule defined in the alert settings.
User Preferred Data Location Changed	As per the schedule defined in the alert settings.

Notifications	DLP Autodelete Warning	2 hours	None
Initiating DLP Autodelete NOW	2 hours	None
Restore Status	Immediate on completion of restore	None
SharePoint Restore Status	Immediate on completion of restore	None
App Access Revoked	Immediate	None

Severity	Alert name	First Alert	Reminder Notifications
Critical	Preserved Users Limit Reached	Immediate	Daily
Endpoint Encryption Failed	Every 2 days
License Expiry	Daily
Only One Admin Configured	Daily
AD Connection Status	Daily
Cache Server Connection Status	Daily
AD/LDAP Authentication Failure	Daily
User Preservation Failed	None
SharePoint Multi-Geo Storage Mapping Not Defined	Daily

High	Cache Storage Space Low	Immediate	Daily
Low Guest User License	Weekly
Low Storage Space Available	Daily
Unauthorized access	Daily
Unusual data activity	Daily

Warning	Low User Storage Space Available	Immediate	Daily
Misconfigured Backup Folder	Every 3 days
Salesforce Backup Failed	Daily
System, App Settings Backup Failed	Every 3 days
User Backup Inactivity	Every 3 days
SharePoint Backup Failed	Weekly
SharePoint Site Geo Location Changed	As per the schedule defined in the alert settings.
User Preferred Data Location Changed	As per the schedule defined in the alert settings.

Notifications	DLP Autodelete Warning	2 hours	None
Initiating DLP Autodelete NOW	2 hours	None
Restore Status	Immediate on completion of restore	None
SharePoint Restore Status	Immediate on completion of restore	None
App Access Revoked	Immediate	None

For more information, see Configure Alert Settings.

Alert notifications with Collate enabled

The following table indicates how the alert notification schedule is impacted when Collate is configured for the alerts. Since Collate can be configured only for alerts with severity type High and Warning, the notification schedule of Critical and Notification alerts does not get impacted.

Severity	Alert name	1st Alert	2nd Alert
Critical	Preserved Users Limit Reached	Immediate	Daily
Endpoint Active License Limit Reached Threshold	Daily
Microsoft 365 Active License Limit Reached Threshold	Daily
Google Workspace Active License Limit Reached Threshold	Daily
Endpoint Active License Limit Reaching Threshold	Daily
Google Workspace Active License Limit Reaching Threshold	Daily
Microsoft 365 Active License Limit Reaching Threshold	Daily
Endpoint Preserved License Limit Reached Threshold	Daily
Microsoft 365 Preserved License Limit Reached Threshold	Daily
Google Workspace Preserved License Limit Reached Threshold	Daily

Endpoint Encryption Failed	Every 2 days
License Expiry	Daily
Only One Admin Configured	Daily
AD Connection Status	Daily
Cache Server Connection Status	Daily
AD/LDAP Authentication Failure	Daily
SharePoint Multi-Geo Storage Mapping Not Defined	Daily

High	Cache Storage Space Low	Collate schedule	Collate schedule
Low Guest User License
Low Storage Space Available
Unauthorized access
Unusual data activity

Warning	Low User Storage Space Available	Immediate	Collate schedule
Misconfigured Backup Folder
Salesforce Backup Failed
System, App Settings Backup Failed
User Backup Inactivity
SharePoint Backup Failed
SharePoint Site Geo Location Changed	As per the schedule defined in the alert settings.
User Preferred Data Location Changed	As per the schedule defined in the alert settings.

Notifications	DLP Autodelete Warning	2 hours	None
Initiating DLP Autodelete NOW	2 hours	None
Restore Status	Immediate on completion of restore	None
SharePoint Restore Status	immediate on completion of restore	None
App Access Revoked	Immediate	None

For more information, see Configure Alert Settings.

Manage Alerts

Overview

Microsoft 365 Complete Report for Gov Cloud

Manage Alerts

Endpoints Complete Report for Gov Cloud