A threshold policy specifies a minimum number of duplicate events that must occur within a specific period of time before the cell accepts the event. For events allowed to pass through to the cell, the event severity can be escalated or de-escalated a relative number of levels or set to a specified level. If the event occurrence rate falls below a specified level, the cell can take action against the event, such as changing the event to closed or acknowledged status.
To create a new threshold policy
- From the Event Management Policies tab of the Administration View, expand the By Policy Type folder.
- Under the By Policy Type folder, select Threshold Policy.
- Click Add Policy .
A Selector Chooser dialog box is displayed.
- From the Selector Chooser dialog box, select the event selector that you want to use for this policy and click OK.
The Threshold Policy Details tab is displayed in the details pane of the Administration View as shown in the following figure.
Threshold Policy Details tab
- In the Policy Name field, type a unique alphanumeric name for the event management policy. The name must contain no spaces.
- In the Description field, type a description of the event management policy.
- To enable the event management policy, select the Enabled check box. If you do not want to enable the policy at this time, you can return to this dialog box and enable the policy later.
- In the Policy Activation Timeframes section, define the periods of time the event management policy should be active (when enabled) by performing the following actions:
- Select one of the following choices:
- To make the event management policy active continuously, select Always Active.
- To specify when the policy is active or inactive, select Define Activation Timeframes.
The Active Timeframes and Not Active Timeframes check boxes are enabled.
- If you selected Define Activation Timeframes, depending on how you want to define the timeframe for your policy do one or both of the following:
- For the Number of Duplicate Events Received slot, supply a numeric value and an associated time measurement to specify the threshold above which an event is accepted.
- Select one of the following options (The threshold-specific options displayed on the tab change depending on which option you select.):
- Hold Events Until Threshold is Met—Select this option to prevent creation of any specified event until the number of events exceeds the threshold within the specified time period.
If you select Hold Events Until Threshold is Met, the options shown in the following figure are displayed. Specify whether to include allowing the last, first, highest, or lowest severity event to pass and whether to acknowledge or close the passed event when incoming (new) events fall below a specified low threshold rate.
Hold Events options
- Pass Events through—Select this option to create all events when they meet the required threshold rate.
If you select Pass Events through, the options shown in the following figure are displayed.
Pass Events Through options
Choose one of the following options to determine how the severity of the event is escalated or de-escalated:
To save the completed event threshold policy, click OK.
administration console saves the defined event management policy, and it is displayed in the list of event policies for the selected event selector.