what do you mean when you say 'is Alert go by defaults'?
On an MDR setup (6.x and onwards) the sensors will send the alerts to both manager.
If one of the manager is down, the MDR will synch the alerts once both managers are up again using the MDR synch task.
Thanks for answer!
But is it like what you talk about at 7.x or 5.x? At 6.x two manager will sync alerts? is that mean when one manage will get the one alert? How do two manager sync setting?