AlienVault® USM Anywhere™

Sensor Disconnected from the USM Anywhere Service

Role Availability Read-Only Analyst Manager

USM Anywhere informs users in a Manager role by email when a sensorSensors are deployed into an on-premises, cloud, or multi-cloud environment to collect log and other security-related data. This data is normalized and then securely forwarded to USM Anywhere for analysis and correlation. has been disconnected from the service.

Note: Logs are cached locally and will be forwarded to USM Anywhere when the connection resumes.

If a sensor disconnects after connecting it to the USM Anywhere service, a notice will be issued within an hour of the disconnection. This notice will be received at the email address used to sign into USM Anywhere and it will inform you that your sensor is not connected. You can immediately take action to restore your service either by working with AT&T Cybersecurity Technical Support or by making an environmental, network connectivity change.

The notification will be generated on a daily basis until the sensor is reconnected. After seven days, the notifications will no longer be issued.

After your sensor reconnects, you will receive an email notification, so that you know that your service has been restored without having to continually log in to the product and check the sensor connection status.