Alerts screens

The Alerts screen permits you to define thresholds on Thread (and other) counters. When an alert threshold is exceeded, a new syslog message is generated and fed back into the message log to annotate the message stream. Additionally, an alert can open a Ticket on the system, that can trigger special notifications and actions.

Various types of alerts are available. Each alert defines a particular condition (either a rate or combination of events) that results in actionable data. Each alert provides the ability to assign an action to a user (through the Tickets facility, discussed in the next section). Finally, each alert can trigger a Ticket Action, such as sending e-mail or performing corrective action on a situation.

Users can add, edit, or delete alerts. The user selects specific alert condition, compare function, threshold and interval. Additionally, you specify a new syslog message, facility, severity, and indicates whether a second syslog message is sent when the counter threshold returns to normal.

The Alerts application also contains a Config tab that provides general utility in configuring the various elements of the correlation process. For detailed information regarding correlation techniques and usage, see Using-correlation-alerts.

This section provides information about the following topics: