Automated Remediations Reference

Updated at Apr 02, 2025
By Kali Patrick

Table of Contents

Conditions Actions

Conditions are the criteria that Automated Remediations have to meet for the remediation to run.

Conditions

Note: All of the conditions are matched using the following operators: “Is,” “Is Not,” or "Contains."

The table below describes Conditions you can use in Automated Remediations:

Condition	Description
Alert Body	The Alert description.
Asset Custom Field	Only run the Automated Remediation for assets based on their custom fields and the values those fields contain.
Asset Has AV	True or False
Asset Name	Name of the asset for when you want to run the Automated Remediation on the asset, or assets with similar naming conventions.
Asset OS Type	Operating System (e.g. Windows 11, Windows Server, Mac OS X, etc.)
Automation Has Never Run	Only run the Automated Remediation if it has never run on the asset before.
Business Hours	Set the Automated Remediation to run inside or outside Business Hours you've defined in Admin > Syncro Administration - Business Hours.
Customer	Monitor for alerts from specific Customers.
Customer Policy Folder	Only run the Automated Remediation if the asset is assigned to the Customer Policy Folder or selected subfolder. (Search and select.)
Policy Folder Name	Only run the Automated Remediation if the asset is assigned to a specific Policy Folder. (Free form entry.)
Process Monitor	The Automated Remediation will watch and run when the alert is from a tracked Process Monitor.
Rate Limit	Limit the Automated Remediation to run only X times per Y days.
Service Monitor	The Automated Remediation will watch and run when the alert is from a tracked Service Monitor.
Trigger Category	Select a monitoring trigger from the dropdown menu. You can also type your own custom trigger name if you're creating your own alerts using Syncro Scripting.

Actions are one or more things done when Conditions for an Automated Remediation are met.

Note: If you specify multiple actions, the Convert to Ticket action will run first.

The table below describes the Actions you can use in Automated Remediations:

Action	Description
Clear Alert	Clears the alert so the asset can receive a new alert (and run an automation in the future).
Convert to Ticket	Creates a ticket for the alert under the Customer/Contact for the asset. You can also add a public or private comment to the ticket, set ticket status, issue type, and any ticket custom fields. You may also choose and/or create Ticket Tags.
Email Custom Email Address	Email any email address when the Automated Remediation runs.
Email Customer/Contact	Send email to the Customer/Contact that you are running repairs.
Email Technician	Send email to the Technician that the Automated Remediation is running.
Enable Maintenance Mode	Once enabled, you will not be notified of alerts for this asset for the Duration you specify. Best used if you're about to perform work that could trigger alerts like offline alerts, for example.
Post to Slack	Add a webhook, and Syncro will post a message to Slack.
Run Script	Runs a saved script on the asset.
Send Customer SMS	Sends an SMS message to the (Customer) Organization number. Syncro does not support sending SMS to End Users/Contacts, even if an asset has one assigned.
Send Manual SMS	Sends an SMS message to a specific number. Syncro automatically adds the country code based on your locale, which is specified in Admin > Syncro Administration - General Preferences.