We have two poorly defined alerts with a different naming convention for the same thing, which is confusing. The difference between the two is just the number of days that the device/endpoint has not checked in.