Skip to Content


Alert Formulas

Alert Formulas are an advanced feature of the alerting facility. This feature allows you to set thresholds on any system counter, including those that do not explicitly appear in the System Counter drop-down menu on the Alert Edit screens. In particular, you can set thresholds on device address message counters, even though these are not explicitly listed in the drop-down menus.

Additionally, you can create complex formulas that reference multiple counters, such as summing up various counters with specific weights.

Information
Example

You can set a threshold on the sum of various counters, where each counter is first multiplied by a specific factor or, you can set a threshold on the log10 value of a counter, to compress the counter value into a logarithmic scale.

The Alert Formulas screen, accessed by the Correlation > Config navigation tab, furnishes this capability. This screen provides special utility in creating special math formulas that work with the BMC Defender Server alerts facility. You first create a formula, using special notations to refer to one or more system counters. Once a formula is created, it appears in Alerts component edit screen (with a Formula/ prefix) and can be subsequently selected like any other system counter.

Related topic

Using-correlation-alerts

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC AMI Command Center for Security 5.9