Creating a new threshold policy

A threshold policy specifies a minimum number of duplicate events that must occur within a specific period of time before the cell accepts the event. For events allowed to pass through to the cell, the event severity can be escalated or de-escalated a relative number of levels or set to a specified level. If the event occurrence rate falls below a specified level, the cell can take action against the event, such as changing the event to closed or acknowledged status.

To create a new threshold policy

1. From the Event Management Policies tab of the Administration View, expand the By Policy Type folder.
2. Under the By Policy Type folder, select Threshold Policy.
3. Click Add Policy .
   
   A Selector Chooser dialog box is displayed.
   
4. From the Selector Chooser dialog box, select the event selector that you want to use for this policy and click OK. 
   
    The Threshold Policy Details tab is displayed in the details pane of the Administration View as shown in the following figure.
   
   Threshold Policy Details tab
   
5. In the Policy Name field, type a unique alphanumeric name for the event management policy. The name must contain no spaces.
6. In the Description field, type a description of the event management policy.
7. To enable the event management policy, select the Enabled check box. If you do not want to enable the policy at this time, you can return to this dialog box and enable the policy later.
8. In the Policy Activation Timeframes section, define the periods of time the event management policy should be active (when enabled) by performing the following actions:
   1. Select one of the following choices:
      • To make the event management policy active continuously, select Always Active.
      • To specify when the policy is active or inactive, select Define Activation Timeframes.
        
         The Active Timeframes and Not Active Timeframes check boxes are enabled.
   2. If you selected Define Activation Timeframes, depending on how you want to define the timeframe for your policy do one or both of the following:
      • To specify the periods of time when the policy should be active, select the Active Timeframes check box and one or more timeframes from its scrollable list. 

      • To specify the periods of time when the policy should be inactive, select the Not Active Timeframes check box and one or more timeframes from its scrollable list.

        Note

        You can select both check boxes to create active and inactive time periods. However, the inactive time period takes precedence over the active time period.

9. For the Number of Duplicate Events Received slot, supply a numeric value and an associated time measurement to specify the threshold above which an event is accepted.
10. Select one of the following options (The threshold-specific options displayed on the tab change depending on which option you select.):
    • Hold Events Until Threshold is Met—Select this option to prevent creation of any specified event until the number of events exceeds the threshold within the specified time period.
      
      If you select Hold Events Until Threshold is Met, the options shown in the following figure are displayed. Specify whether to include allowing the last, first, highest, or lowest severity event to pass and whether to acknowledge or close the passed event when incoming (new) events fall below a specified low threshold rate.
      
      Hold Events options
      
    • Pass Events through—Select this option to create all events when they meet the required threshold rate.
      
      If you select Pass Events through, the options shown in the following figure are displayed.
      
      Pass Events Through options
      
      Choose one of the following options to determine how the severity of the event is escalated or de-escalated:

• Levels to Escalate/De-Escalate Event Severity By—Choose this option to escalate or de-escalate the severity of the event by a specified number of levels after the number of events specified Number of Duplicated Events Received selector have occurred within the time period specified by the Timespan in which Events the Must Arrive selector. Enter the number of severity levels that the event is to be escalated.

• Set Severity to This Value—Choose this option to set the event to a specified severity level after the number of events specified Number of Duplicated Events Received selector have occurred within the time period specified by the Timespan in which Events the Must Arriveselector. Select the severity level from the list.

  Note

  From the Set Severity to This Value list, select Critical, Non-critical, Minor, Warning, or OK. Do not select Unknown, because it is considered a status rather than a severity.

To save the completed event threshold policy, click OK.

administration console saves the defined event management policy, and it is displayed in the list of event policies for the selected event selector.