Tamper
A tamper rule alerts you the moment a tag reports that it has been physically detached from the asset it's attached to. Use it to catch asset theft, tampering, or a tag being removed from equipment it's meant to stay on.
How it works
Tamper detection is event-driven, not polled. Tags that support tamper detection report a "detached" signal as soon as they're removed. When a tag reports it, any enabled tamper rule fires immediately — there's nothing to configure beyond the rule itself.
The alert message names the tag and the reason, for example:
Forklift 12 reported tamper (tag detached)
The alert follows the severity you set on the rule, so you can make tamper a notification or a high-severity alert to acknowledge and resolve.
Tamper state
Separately from the alert, a tag that has reported tampering carries a tamper state flag, shown on the asset. This stays set until you clear it, so an operator can see that a tag needs checking even after the alert itself is resolved. Clear the tamper state from the asset once you've inspected the tag.
Parameters
A tamper rule has no rule-specific parameters — it fires whenever a monitored tag reports detachment. Like every rule, you can set its severity and limit it to specific tags or asset types.
See the rule types reference for the full specification.
Example: securing medical equipment
A hospital tags infusion pumps that should never leave their ward unattended.
- Create a tamper rule applied to the "infusion pump" asset type, at high severity.
- Add an email notification so the ward lead is alerted.
- If a pump's tag is removed, an alert fires immediately and the tag shows a tamper state until staff check it and clear it.