how-to · watch Open this in the console

Limit an alert rule to servers in one role.

Alerts › rules. Type is the row of ticks. Tags are the tree under it. The line under the tree is how many machines match both.

Server plus role/DC is the domain controller, not every server and not every machine in that role.
01

Tick server

Open Alerts › rules and press + rule. Under type, tick server. The chip says every server in Example Co · 2, and the line says it covers 2 of 6. Those two are Accounts server and files01. Reception PC is a workstation, so it is already out. None ticked would still mean every type. Two types ticked, with no tag, would mean either of those types.

New alert rule with the server type ticked, covering two machines
New rule with server ticked. It covers 2 of 6. No tag is ticked yet.
02

Also tick role / DC

Open role and tick DC. Server stays ticked. The chip says role › DC · 1, and the line says it covers 1 of 6. Accounts server is a server and role/DC, so it stays. files01 is a server with no role, so it drops out. Lab host is role/hypervisor, not DC, and it is not a server. The address is typed and not added yet.

Tag tree with role DC ticked while the server type is also ticked, covering one machine
Server and role DC are both ticked. One machine. The address is typed and not added yet.
03

Add who is told, then read the sentence

Press add contact. The grey sentence reads: tell email ops@example.com when a warning or worse (any kind) opens on 1 machine server and tagged role › DC, and again when it resolves. The word between them is and. Press add rule when that sentence is the one you want. This shot stops before that. Cancel drops the draft.

Rule editor with server and role DC, an email contact, and a preview that joins them with and
The sentence names server and role › DC. Add rule saves it. Nothing has been saved in this shot.

Servers on their own are Limit an alert rule to servers. The role on its own is Limit an alert rule to one role. A site is Limit an alert rule to one site. Putting the role on the machine is Put a machine in a role.