Global User Alert Monitor screen
As part of the Windows installation, a new tab is created in the Alerts section of the BMC Defender web interface, that permits the operator to configure various parameters associated with one or more Global User Alerts. This screen is visible to all users, but only BMC Defender admin type logins might add or edit the alert specifications. The screen is depicted as follows:

The preceding screen shows a standard BMC Defender screen, incorporating an AddNew to add new monitors, and Edit associated with each Global User Alert configuration item. Zero or more Global User Alerts can be added to the system. Each global alert might have zero or more active user alerts, depicted beneath the main alert. If any user exceeds the configured threshold, the indicator turns from green to red, and a ticket is opened for the user (with the text specified by the operator and depicted to the right of the screen).
The screen provides several elements, described as follows:
- Screen Controls—The screen contains standard dialog buttons at the top, permitting you to match alert messages and text, and permitting you to add new alerts (via the AddNew, or Wizard).
- Edit Button—Beneath the Screen Controls are zero or more global alert specifications, where each specification has a numbered Edit. You can modify or delete any global user alert by clicking this.
- State Indicator—Each global user alert specification has a status indicator, colored as follows: Gray indicates there are currently no active user alerts for the specification. Green indicates there are one or more active user alert instances, but all alert instances are below the configured threshold. Red indicates there are one or more active user alert instances that are above the alert threshold. This state indicator rolls up the state indications for each active user alert, described as follows.
- Threshold—Each global user alert specification displays the configured threshold and interval (specified when the operator created the alert). This threshold indicates the maximum number of messages for ANY active user during a configured time interval before a ticket is opened for the user and a message is sent back to the event log.
- Active User Alerts—Each global user alert specification displays the number of active user alerts, that is, the number of users currently being tracked by the global user alert. If the value is zero, the State Indicator (above) will be Gray, otherwise the state indicator will be either Green or Red, depending upon whether a threshold has been violated for any of the active user alerts.
- Alert Message—Each global user alert specification displays the alert message that is sent back to the event log and used as the text of the ticket. The operator configures the specific alert message when the global user alert is created, and applies to any tickets created by any active user alert instance. The assignee of the ticket is displayed at the bottom of each configured message.
- Active User Alert Instances—Beneath the preceding values, each global user alert specification can have or more different active user alerts, where each active user alert instance contains its own state indicator, and an indication of the current counts. If any count is above the threshold, the state indicator is red (indicating that a ticket has been opened for the instance) otherwise the state indicator is green.