Enabling rules and rules groups in Real-Time Monitoring (4257400)

Do both the rule groups and rule need to be enabled for a Real-Time Monitoring rule to work.

For Intrust Real Time Monitoring rules to run the rule needs to be enabled as well the group the rule belongs to, if the rule was added by the group. If either of those rules are disabled then the rule will not run.

If the rule is explicitly specified, then the group the rule is in does not need to be enabled.

To check this:

1. Expand the Real-Time Monitoring node in the InTrust Manager
2. Expand the Rules folder
3. Right-Click the rule group and select properties, there should be a check in the Enabled box
4. To check the rule expand the rule group
5. Right-Click the rule and choose properties and confirm that there is a check in the enable box

Also once a rule is enabled agents are installed to all servers in that policy.