Schedule rules are designed to detect discrepancies in employee schedules or workflows. For example, you can use them to receive a notification when an employee is late, block remote logins during off-hours, etc.
You can specify the detection criteria for these rules in the Schedule tab of the Rule Editor.
Schedule rules use the employee schedules and the time zone set in the Dashboard's Locale settings to determine their detection criteria.
Schedule Rule Examples
Get notified when a user attempts to log in during abnormal hours or on a day off.
Warns the user or automatically locks out their computer if they are idling for too long.
Notify the supervisor automatically when an employee is absent or late.
Notify HR and/or payroll if the employee’s work time or scheduled work hours change.
Create a list or range of restricted IPs and disallow login from those IPs.
Schedule Rule Criteria
The table below explains what criteria or schedule violation incidents the Schedule rules support and what conditions you can use with them.
Daily Work Time
This criterion can be used to detect if there are any discrepancies in an employee’s daily work time. You can detect if their work hours are less than or more than the specified hours.
Select either Is Greater Than or Is Less Than and enter an hour value in the Define the time range field.
Scheduled Work Time
This criterion can be used to detect if an employee is working longer or shorter than scheduled.
Select either Is Greater Than or Is Less Than and enter a minute value in the Define the time range field.
Starts
This criterion can be used to detect if an employee started their work earlier than scheduled by the specified minutes.
Enter a minute value in the Define the time range field.
Ends Early By
This criterion can be used to detect if an employee ends their work earlier than scheduled by the specified minutes.
Enter a minute value in the Define the time range field.
Ends Late By
This criterion can be used to detect if an employee ends their work later than scheduled by the specified minutes.
Enter a minute value in the Define the time range field.
Arrives Late
This criterion can be used to detect if an employee starts their work later than scheduled by the specified minutes. Note that, unlike the “Is Late” condition, this will trigger the rule after the employee has logged in.
Enter a minute value in the Define the time range field.
Absent
This criterion can be used to detect if an employee is absent.
No other value is required.
Arrives Late
This criterion can be used to detect if an employee is late in logging in to their computer according to their scheduled start time. Note that, unlike the “Arrives Late” condition, this will trigger the rule before the employee has logged in.
Enter a minute value in the Define the time range field.
Works on Day-Off
This criterion can be used to detect if an employee is working on their day off.
No other value is required.
Login (Stealth Agent)
This criterion can be used to detect if an employee logs in during off hours and, optionally, also detects if they are trying to log in from a restricted IP.
Set the off-hour range on the Set up off-hours slider. Drag the two Orange Circles to adjust the time. Click the Reverse icon to reverse the time.
You can restrict IPs from where the login is not permitted in the Restricted IPs field. You can enter any text in the IPv4 format, i.e., 101.10.2.1/32, and choose a “matches” or “does not match” condition. Or, you can select a Shared List (Network type) and specify a “matches list” or “Does not match list” condition.
If you check the Apply on screen unlock option, then the login event will be triggered when the user unlocks their screen.
Click on the days under the Exclude days section to include/exclude days in the detection criterion.
Idle
This criterion can be used to detect if an employee is idling (no keyboard or mouse activity) for more than the specified minutes.
Enter a minute value in the Define the time range field.
Set the off-hour range on the Set up off-hours slider. Drag the two Orange Circles to adjust the time. Click the Reverse icon to reverse the time.
The Idle criterion will generate a single alert when the rule is violated. This means the rule will trigger when the user becomes idle for the duration specified in the rule's threshold (Define the time range field). In the above case, the user will get a warning at the 30-minute mark. If the user continues to stay idle, they will not receive any more warnings. However, if the user becomes active and then goes to idling again, the rule will reset and issue a warning after another 30 minutes.
This criterion works independently of the Idle time threshold value in the Applications monitoring settings.