Analysis and reporting on alert severity trends over time for managed service providers.
Analysis and reporting on alert severity trends over time for managed service providers.
The data covers the full scope of Autotask PSA records relevant to this analysis, broken down by the key dimensions your team needs for day-to-day decisions and client reporting.
Who should use this: NOC teams, service managers, and operations leads managing alert workflows
How often: Daily for alert triage, weekly for noise reduction, monthly for monitoring optimization
Analysis and reporting on alert severity trends over time for managed service providers.
EVALUATE ROW("Total Alerts", COUNTROWS('BI_Datto_Rmm_Alerts'), "Critical", COUNTROWS(FILTER('BI_Datto_Rmm_Alerts', 'BI_Datto_Rmm_Alerts'[priority] = "Critical")), "High", COUNTROWS(FILTER('BI_Datto_Rmm_Alerts', 'BI_Datto_Rmm_Alerts'[priority] = "High")), "Moderate", COUNTROWS(FILTER('BI_Datto_Rmm_Alerts', 'BI_Datto_Rmm_Alerts'[priority] = "Moderate")))Breakdown of alert severity trends over time across managed clients.
| Client | Critical (30d) | Warning (30d) | Info (30d) | Critical Trend | Status |
|---|---|---|---|---|---|
| Lewis LLC | 1,247 | 4,821 | 8,219 | Rising | Good |
| Martin Group | 1,147 | 4,435 | 7,561 | Rising | Good |
| Wall PLC | 1,047 | 4,050 | 6,904 | Rising | Warning |
| Ramos Group | 948 | 3,664 | 6,246 | Rising | Warning |
| Hahn Group | 848 | 3,278 | 5,589 | Rising | Critical |
| Anderson Group | 748 | 2,893 | 4,931 | Rising | Good |
Lewis LLC leads across most metrics in this analysis. Hahn Group shows the weakest performance and should be flagged for a dedicated review. The gap between top and bottom performers suggests an opportunity to standardize processes across the portfolio.
EVALUATE
SUMMARIZECOLUMNS(
BI_Datto_Rmm_Alerts[company_name],
"Critical (30d)", COUNTROWS(BI_Datto_Rmm_Alerts),
"Warning (30d)", CALCULATE(COUNTROWS(BI_Datto_Rmm_Alerts), BI_Datto_Rmm_Alerts[status] = "Active")
)
ORDER BY [Critical (30d)] DESCHow alert severity trends over time has evolved over the past three quarters.
| Month | Total | Critical | High |
|---|---|---|---|
| 2026-01 | 13,736 | 164 | 141 |
| 2025-12 | 19,589 | 323 | 215 |
| 2025-11 | 24,506 | 303 | 170 |
| 2025-10 | 29,485 | 207 | 105 |
| 2025-09 | 15,478 | 499 | 135 |
| 2025-08 | 8,805 | 160 | 197 |
| 2025-07 | 12,631 | 439 | 428 |
The portfolio shows steady improvement over three quarters, with the primary metric increasing from 81.8% to 87.4%. This 5.6 percentage point gain reflects ongoing optimization efforts. To maintain this trajectory, continue the current remediation cadence and expand coverage to newly onboarded clients.
EVALUATE GROUPBY(ADDCOLUMNS(FILTER('BI_Datto_Rmm_Alerts', NOT(ISBLANK('BI_Datto_Rmm_Alerts'[timestamp_date]))), "AlertMonth", FORMAT('BI_Datto_Rmm_Alerts'[timestamp_date], "YYYY-MM")), [AlertMonth], "Total", COUNTX(CURRENTGROUP(), 'BI_Datto_Rmm_Alerts'[alert_uid]), "Critical", SUMX(CURRENTGROUP(), IF('BI_Datto_Rmm_Alerts'[priority] = "Critical", 1, 0)), "High", SUMX(CURRENTGROUP(), IF('BI_Datto_Rmm_Alerts'[priority] = "High", 1, 0))) ORDER BY [AlertMonth] DESCThe risk matrix shows that most entities fall in the low-risk category, but the high-risk group demands immediate attention. The moderate-risk group shows a declining trend that could escalate without intervention.
| Category | Items | Primary | Secondary | Status |
|---|---|---|---|---|
| Category A | 234 | 94.2% | 14 | Healthy |
| Category B | 187 | 89.3% | 20 | Review |
| Category C | 156 | 91.7% | 13 | Healthy |
| Category D | 98 | 86.7% | 13 | Review |
| Category E | 67 | 82.1% | 12 | At Risk |
| Category F | 45 | 95.6% | 2 | Healthy |
The detailed breakdown shows clear performance differences. The bottom two categories require targeted action to improve overall portfolio health.
Overall portfolio health is strong at 92.4%, but the 87.3% coverage rate suggests that roughly 1 in 8 entities is not fully monitored. The 23 open action items represent a manageable backlog if addressed within 2 weeks.
The gap between top and bottom performers is wider than expected. The bottom 20% scores more than 25 percentage points below the portfolio average, indicating structural issues that require targeted intervention.
Entities in the moderate risk category show a declining trend over the past quarter. Without intervention, 3-4 of these entities may shift to the high-risk category within 60 days.
The top 30% of the portfolio maintains stable performance above target, indicating current best practices are effective and can serve as a model for the rest.
1. Conduct a targeted review of all high-risk entities within 2 weeks. Document the root cause for each entity and create a remediation plan with clear deadlines and accountable owners.
2. Implement automated monitoring for the moderate-risk group. Set thresholds that trigger an alert when performance drops 5 percentage points below target, enabling early intervention before entities slip into high risk.
3. Schedule this report monthly as part of the QBR process. Use the trend data to verify that improvement initiatives are delivering measurable results across multiple quarters.
Critical (30d) tracks the key performance indicator for alert severity trends over time. It is calculated based on data from Datto RMM and refreshed daily.
Data syncs every 24 hours from Datto RMM. The report reflects the most recent complete data set.
Schedule a dedicated review for any client falling below the portfolio average. Create an action plan with specific remediation steps and follow up within 2 weeks.
Yes. This report is designed to be QBR-ready. Export the key metrics and trend data to include in your quarterly business review slide deck.
Connect Proxuma Power BI to your PSA, RMM, and M365 environment, use an MCP-compatible AI to ask questions, and generate custom reports - in minutes, not days.
See more reports Get started