Getting started with the Rules area
In the Policies > Rules area, you can configure and activate rules to automatically send you an email notification when a particular event occurs on a device, so you can promptly take the appropriate action. You can also notify other individuals.
For Alert rules, you can base the rule on any of the events that show on the Events page in the History area.

Depending on your Absolute product licenses and the configuration of your account, the Rules area may include two rule templates, which are available when you create a rule:
Rule template | Details |
---|---|
Freeze if offline for too long |
Use this template to freeze your devices that are offline for more than a specified number of days, and send an email notification. This template creates an Offline Freeze rule. |
Unexpected location change |
Use this template to send an email notification when a device enters or exits a geofence or a location. This template creates a Location rule. Depending on the configuration of your account, you may not be able to create Location rules. |

To access the Rules area:
- Log in to the Secure Endpoint Console as a user with either of the following permissions the View or Manage permissions for Rules.
-
On the navigation bar, click
Policies > Rules.
The Rules area opens to show the All Rules page, which lists all existing rules.
-
[Optional] To view the rules of a particular type, click one of the following rule categories on the Rules sidebar:
-
Offline freeze
-
Location
-
Action
-
Alert
Depending on the Absolute product licenses associated with your account, and your user role, some rule categories may not be available.
-
-
To search for a rule, enter all or part of the rule name or description in the Search field.
-
When you create a rule, you can set it to either active or inactive. Inactive rules are not yet applied to any devices. To refine the list of rules so only active rules show, click the Show inactive checkbox to clear it.
-
To see a more simplified view of the rule list, click
to hide each rule's description, date of the most recent rule update, and user who performed it. Click
to expand the rows again.
-
Icons convey the following information about each rule:
Icon Description (Applies to Action rules only)
An item referenced in the rule has been deleted
The rule is deactivated. Before reactivating it, edit the rule to remove or replace the deleted item.
(Applies to Action rules only)
The number of actions
If a red dot shows next to the icon (
), an item referenced in an action has been deleted.
The number of email recipients The number of device groups associated with a rule The number of policy groups associated with an Offline Freeze rule The number of devices associated with a migrated Offline Freeze rule Hover over each icon to view up to five items in a tooltip. If a View Details link shows in the tooltip, click it to view additional items.

To view more information about a rule, click anywhere on the row background. The rule overview dialog opens to the right of the work area.
The rule overview dialog is not available for Offline Freeze rules.
The following information about the rule is available:
- Rule name
- Description (if provided)
- Status (Active or Inactive)
-
Date of the most recent rule update (as a relative date, such as 23 days ago)
Hover over the relative date to view the exact date and time in a tooltip.
- User that last updated the rule
-
Rule configurations:
- Devices with triggered rule (applies to Action rules only)
A chart showing the number of devices that triggered the rule over the last 7 days
To change the date range, click Last 7 days and select Last 30 days, Last 60 days, or Last 90 days. To enter a custom time range, click Select and select two dates in the calendar.
-
Rule: event that will trigger the rule
For Location rules, the specified locations and/or geofence names are listed. They are also shown on a map.
If Deleted field shows for an Action rule, a custom device field or Custom data point was deleted, and the rule is now deactivated. Before you can reactivate it, you need to edit the rule to replace the deleted item.
-
Action: action that the rule will perform
If one of the following labels shows for an Action rule, the specified item was deleted, and the rule is now deactivated:
-
Deleted group
-
Deleted script
Before you can reactivate it, you need to edit the rule to replace the deleted item.
-
- Scope: device groups that the rule is assigned to
- Find actions triggered by this rule (applies to Action rules only)
Click this link to view the Freeze, Send Message, and Run Script requests that the rule has created. The Actions page opens, filtered by Requester is <Action rule name>. By default, the report shows the last 30 days of triggered actions, but you can change the time range.
The View permission for the applicable action is required to view the Actions page.
If your user role is granted the Manage permission for Rules, you can:
- Click Edit to update the rule configurations or delete the rule.
- For Location rules, click Edit next to the name of a geofence to manage the geofence.
To close the rule overview dialog, click .

From the Rules page, users with the required permissions can:
- create Alert rules
- create Action rules
- create Offline Freeze rules
- create Location rules
- create geofences within a Location rule
- Manage existing rules
- Manage existing Offline Freeze rules