Monitoring & Management

No, it won't. With the duration condition, an alert fires only when the breach lasts for the time you set, and a resolved entry is written when it ends. Even if the extension restarts, a firing alert isn't notified twice.

No, it doesn't. Turning logging on only flips the logging flag and never touches a rule's content or your security posture; every change is previewed first.

Today the notification channels are webhook and Slack; email and SMS aren't supported directly. You can turn alerts into email or SMS by connecting the webhook to your own notification system.

No, they can't. Records are filtered by your organization's gateway tag, which is re-checked on every line, and an organization without a gateway gets an empty result.

No, you don't. Metrics are read from the virtualization layer; for disk usage to show, guest tools just need to be running on the server.

Not today: logs are searched inside the portal, and export or SIEM forwarding isn't offered. If records must also be kept outside, running your own log server on a server is recommended.