Already a NinjaOne customer? Log in to view more guides and the latest updates.

NinjaOne Endpoint Management: Policy Activities: Frequently Asked Questions (FAQ)

Topic

This article answers frequently asked questions about policy activities in NinjaOne.

Environment

NinjaOne Endpoint Management

Description

Policy activities allow you to enhance and create alerting, visibility, and safety options around specific endpoint events. To view and configure policy activities, navigate to AdministrationPolicies, select a policy,  then click Activities. Refer to Device and System Activity Notification Feed to learn more.

Depending on the device type and applications or integrations enabled, you may notice different options for activity notifications. For example, NinjaOne Backup supports Microsoft Windows 8 and later, Windows Server 2012 R2 and later, and macOS Monterey; therefore, backup activities will not be available for Linux policies.

Frequently Asked Questions

Select a question from the following list:

How do the Port Opened and Port Closed activities work?

The Port Open and Port Closed activities reside in the ActivitiesSystem menu. To determine the port state, the Windows API queries the system's Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) tables for ports with a status of "LISTEN." Those ports are considered open. NinjaOne only reports the ports with a status of "LISTEN."

How does the RAID activity work?

Redundant Array of Independent Disks (RAID) is a data storage virtualization technology that enables you to combine multiple hard drives into logical units, achieving data redundancy, performance improvement, or both.  Windows policies can add notification activities for specific RAID events. You can find RAID activities in the ActivitiesRaid menu.

  • RAID is typically a critical functionality, and is generally implemented on servers.
  • RAID can allow disks to fail without affecting the server's functionality (redundancy).
  • RAID, in certain configurations, quickens read and write activities (performance).
  • The different RAID levels represent various ways in which multiple disks are connected to form a single logical unit.

RAID manages all of the above through a RAID controller, which controls all the input and output to the physical hard drives. NinjaOne can monitor Dell and HP RAID arrays and notify users when certain RAID events are detected. The following table defines RAID activities that can appear in a policy's activity log:

ActivityDefinition
RAID controller addedWhen a RAID controller is added to the device
RAID controller removedWhen a RAID controller is removed from the device
RAID logical disk addedWhen a logical disk (volume) is added to the device
RAID logical disk removedWhen a logical disk (volume) is removed from the device
RAID physical drive addedWhen a physical drive is added to the RAID array
RAID physical drive removedWhen a physical drive is removed from the RAID array

Why are the Windows Service Started and Windows Service Stopped activities not working? 

These services are not available in NinjaOne because they can generate a large number of activities, which can affect system performance. We will remove these options from the Activities page in a future release. 

FAQ

Next Steps