SyslogServer Suite

Software components

Customer Support

5. Alarms are similar to filters

Alarms and filters are specified in a very similar manner. There are a few more options related to how to present an alarm:

• Notifications - how an alarm should be presented
  
• Alarm criteria - what number of entries in what time interval is required for an alarm to occur

A major difference however is that alarms work separately on the database, not using any filters. Since alarms are used identify specific events, and since alarm criteria are specified, an alarm definition does not have the 'negative filter rule' button. The interval is specified from 3 minutes up to 20 days.

The interval also specifies how often the alarm criterion is investigated. An alarm specified at one day will be investigated once per day. When looking for a specific event, the shortest interval of 3 minutes is usually chosen.

When, for example, looking for expected summery reports, the interval is usually chosen to be the same are the interval of the summery reports (Backup status, update status etc).

Next: Using filter groups

Contents:
1. Introduction
2. Using filters
3. Basic filter design
4. Basic filter design, continued
5. Alarms are similar to filters
6. Using filter groups
7. Advanced filter design
8. Advanced filter design, continued
9. Conclusion