03/27/2026: Enhancement - Health Notifications for Remote Sources

Alert Logic has introduced improvements to the Alert Logic console to allow health notifications to be configured for Remote Sources which Alert Logic hasn't collected logs from over a period of time.

Background

A Remote Source consists of logs that have been pushed to one of our syslog collectors, a Remote Collector, or Log Manager. These are sources where the standard agent cannot be installed, but the logs have high security value. Most commonly, this is a firewall, such as Palo Alto or Cisco. 

Previously, Remote Sources would only trigger a health Remediation when no logs had been received for 24 hours.

Health Notification Improvements

With these new improvements, you can now configure Health Notifications for Remote Sources. You can configure against all Remote Sources or against specific Remote Sources.

To configure Health Notifications for Remote Sources:

1. In the Alert Logic console, click the menu icon (). 
2. Click Manage, and then click Notifications. 
3. On the Alerts Notifications tab, click Create a Notification, and then click Health.
4. In the Name box, enter a name for the notification.
5. From the Collection Asset Type list, select Remote Source.
6. Click NEXT.
7. For Remote Source Status, select Not Collecting checkbox. A list of your Remote Sources will appear grouped by their deployment.
8. Select which Remote Sources you want to enable the health notification for. We encourage that you specify specific Remote Sources that are extremely important, there will be other sources which either send a limited number of logs or aren't critical.
9. Click NEXT.
10. On the Delivery tab, select the users who will receive this health notification.
11. Click SAVE.

Additional Resources

See the following documentation for information around Remote Sources and configuring health notifications:

1. Remote Sources in Assets
2. Health Notifications