What criteria can be used to define alert rules in ZDX?

The basis for defining alert rules in Zscaler Digital Experience (ZDX) is primarily centered around specific performance metrics and user experience indicators, which include DNS resolutions, performance thresholds (PFT), and similar parameters that directly impact the digital experience. By using metrics such as DNS latency and performance thresholds, ZDX can effectively monitor and alert on issues that affect application performance and user experience.

This approach allows organizations to create meaningful alert rules that can directly correlate with the actual performance of applications and network services. By monitoring these metrics, ZDX can provide actionable insights that help in troubleshooting and proactively addressing potential issues before they escalate into larger problems.

Other criteria, while potentially useful in certain contexts, do not encompass the same level of specificity and relevance. For instance, focusing solely on user ID or geographic location may provide insights, but they do not directly address the performance metrics that ZDX is designed to monitor. Similarly, time of day is not a performance metric, although it may have implications for usage patterns, it does not provide concrete indicators of system health or user experience as effectively as the technical metrics available in DNS and PFT.