Auto-Learn function

You can drill down into each alert and set the threshold recommended by the Alert Hints screen. However, this function is performed automatically by using the BMC Defender Server Auto-Learn function (accessed on the Alerts>Config>Auto Learn tab). This greatly simplifies the setup of the system, especially after initial installation.

By default, BMC Defender Server monitors message rates for ten days after installation—or after a new thread is added—and derives message statistics each night, shortly after midnight. Given proper conditions (such as the proper amount of data for a thread) the alert thresholds are automatically adjusted based on the following factors:

  • Severity of the alert
  • Average message count
  • Standard deviation from the message average. Additionally, the Auto-Learn function can look at the number of tickets that have been opened by the alert and increase the alert threshold to reduce the number of tickets.

The Auto-Learn function allows you, when you create a new alert, to use a default value for the alert threshold. With time, the system monitors the counters for the alert and set the threshold for the alert to an appropriate value.

Related topics

Using-counter-alerts

Editing-alert-auto-learn-function-parameters

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*