When an Action in a Monitor does not meet expectations, you may have configured the system to send you notifications via email or syslog. You may also choose to review the failing Monitors in the platform. To make this review easier, failed monitors include several visual indicators.
As discussed in Monitor Configuration, when a Monitor runs, if any Action doesn't match the expectations configured in the Monitor, there will be a red bar next to the Monitor in the Monitors and Disconnected Monitors tables. This allows you to tell which Monitors are failing at a glance.
When you edit the Monitor, there are also several visual indicators:
- Steps in the Monitor that failed have an orange circle
- Failure reasons are highlighted in orange, including:
- Expected Block
- Expected Detected (it does not highlight events in the event table)
- Open and Closed Ports
The screenshot below shows several of these visual indicators:
