New: the AI firewall watches every module and explains each incident in plain words. See how it works

Default values

What new device profiles, alarm rules, commands, firmware updates, flows, notifications, LoRaWAN profiles and organisation settings start with.

This page lists the values that Hermetry uses when you do not set one: what a new device profile, alarm rule, command or flow starts with, and the defaults of organisation settings. Each table links to the page that explains the setting and its range. Limits that cannot be changed are in Limits and quotas.

Device profiles

SettingDefaultRangePage
Plain MQTTTLS only (port 8883)Device profiles
Allowed networksEmpty: any networkUp to 64same
Commands allowed without TLSEmptyUp to 32same
Telemetry messages10:1,300:60same
Telemetry points200:1,6000:60same
Attribute updates, attribute requests, RPC messages5:1,60:60same
Certificate requests1:3600same
Connects6:60same
Replay messages per secondHalf the per-second telemetry count1 to 10,000same
Max message payload (bytes)65,5361,024 to 65,536same
Max downlink payload (bytes)65,536 (4 KiB for licensed devices)1,024 to 65,536same
Max raw payload (bytes)4,096256 to 65,536Telemetry keys
Max unacknowledged messages (MQTT)201 to 1,000Device profiles
Inactivity timeout (seconds)60010 to 604,800same
Max children of a gateway5000 to 10,000same
Profile of new childrenGeneric child profilesame
Default RPC timeout (seconds)101 to 300same
Device certificate lifetime365 days30 to 825The device certificate authority
Poll interval of a polled profile300 s (60 s for built-in SNMP templates, 300 s for printers and cameras)30 s to 1 dayPolling intervals, back-off and quota

Firmware updates (profile’s Firmware tab)

SettingDefaultRange
Allow firmware updates for this profileOff
Allow unsigned imagesOff
Allow updates over LTE (mobile data)Off
Download may take (minutes)605 to 1,440
Installing may take (minutes)202 to 240
Tries per update31 to 10

The usual rollout plan: waves of 1 % (1 to 10 devices), 10 %, 50 % and the rest; waits of 30, 30 and 15 minutes; each wave needs 90 % of its finished devices updated, pauses above 5 % failed and closes after 240 minutes. See Firmware updates (OTA) and Rolling out firmware in waves.

Commands

OptionDefault
Do not wait for an answer (one-way)Off (two-way)
Answer timeout (seconds)The command’s default, else 10
Deliver when the device comes back (persistent)The command’s default
Give up after (minutes)24 hours
Ask before running on a board controlOn

See Sending commands to devices and Control cards.

Alarm rules

FieldDefaultRange
debounce.modecount (Readings in a row)count, duration
debounce.raise, debounce.clear11 to 86,400
dampening.maxTransitions42 to 100
dampening.windowSec60010 to 86,400
dampening.holdSec3001 to 86,400
Clear conditionNone: the alarm clears when no severity condition is true
Offline rule: Open after (seconds offline)60010 to 604,800
Offline rule: SeverityWarning
Offline rule: Alarm title{{device.name}} is offline

See Alarm rules on device profiles and Debounce, hysteresis and dampening.

Alarm settings (Alarms > Alarm settings)

SettingDefaultRange
Critical alarms ignore notification preferencesOn
Repeat window (seconds)30060 to 86,400
Storm threshold (per minute)201 to 10,000
Critical alarms sent during a storm (per minute)601 to 10,000
Keep resolved alarms (days)3650 (forever) to 36,500

See Alarm notifications in depth.

Flows

ProtectionDefaultBounds
Runs of one flow a minute before it pauses6,00060 to 600,000
Failed runs in a row before it pauses1005 to 100,000
Runs of one flow at once161 to 1,024
Messages one block sends for one input1001 to 10,000
Repeated device message window60 s1 to 3,600 s
Message time-to-live5 min10 s to 24 h
Commands and settings from flows to one device30 a minute1 to 600
Same notification to the same personOnce per 10 min1 min to 24 h
Shortest Inject repeat60 s1 to 3,600 s
Failed messages kept10,000100 to 100,000
Script CPU per message50 msup to 200 ms by plan
HTTP request / MQTT out timeout10 s, 3 attempts1 to 30 s, at most 5 attempts
Unsaved drafts kept30 days
Versions keptThe newest 100 and those younger than 90 days

See Flow limits.

LoRaWAN device profiles

SettingDefaultRange
RX1 delay5 s1 to 15 s
RX1 data-rate offset00 to 5
RX2869.525 MHz, DR0DR0 to DR7
ADROn
Installation margin (ADR)10 dB0 to 30 dB
De-duplication window200 ms50 to 1,000 ms
Device status request interval24 h0 (never) to 720 h
Confirmed downlink sends30 to 10
Class C reachable after the last uplink900 s60 to 86,400 s
Class C acknowledgement wait60 s5 to 3,600 s

See LoRaWAN device profiles.

Telemetry settings (Settings > Telemetry)

SettingDefaultRange
Future timestamp tolerance (minutes)101 to 1,440
Oldest accepted reading (days)0 (any age)0 to 36,500

See Timestamps, late and duplicate readings.

Notifications

SettingDefaultRangePage
Keep the notification feed (days)71 to 365The bell
Devices per member (push)101 to 100Browser push
Notify block urgencynormalnormal, criticalNotifications from rules and flows
Notify block channelsEmpty: each recipient’s own choicesame

Dashboards

SettingDefault
Grouping intervalauto: by the minute up to 1 hour, 5 minutes up to 1 day, the hour up to 7 days, the day beyond
Aggregate of a seriesavg
Time zone of a windowThe viewer’s browser
A card’s “still watching?” question (video)Every 5 minutes
Status key of site viewsstatus

See Data sources and parameters and Site status and the status key.

Organisation and security settings

SettingDefaultRangePage
Lock an account after (failed sign-ins)51 to 5Sessions, lockout and trusted devices
Lock duration15 minutesSet by the platformsame
Trusted browser30 daysSet by the platform, at most 30same
Require two-step verification for every memberOffTwo-factor sign-in and passkeys
API key lifetime90 daysAt most 365API key hardening
Per-Key Rate Limit (requests/minute)0: the platform default of 1,000 a minuteErrors and rate limits
Max Active Keys0 (unlimited)API key hardening
Webhook Default Rate Limit (per minute)UnlimitedBlank or 0 = unlimitedWebhooks
Quota alert thresholds (%)80, 951 to 5 values, each 1 to 99Usage and quotas
Retention Period (days) (audit log)0: kept foreverAudit log
Max Page Size (audit log)100At most 500same
Report quarantined devices after (days)71 to 30Quarantine
Invitation lifetime (days)7 (the installation default)Only shorterInvite your team
Default role of an invitationUsersame
AI firewall action modeObserveThe AI firewall