Syslog Threshold

From the WhatsUp Gold navigation menu:

1. Select SETTINGS menu > Alerts and Actions > Alert Center.

   Alert Center Libraries view displays.

2. Click Thresholds Library panel (to expand it if collapsed).

   The Thresholds Library displays.

3. On the Thresholds Library panel, click the "add" button ().

   The Select Threshold Type dialog displays.

4. Choose Syslog Threshold and click OK. (This adds a new Syslog Threshold to your library.)

   The New/Edit Syslog Threshold Alert dialog displays. (Now, you must configure your Syslog Threshold.)

5. Edit the Syslog Threshold configuration.

To configure a Syslog threshold:

1. Configure the following:
   • Name. Specify a name for the threshold. This name helps you identify the threshold in the Threshold library and displays as the report title on the Alert Center Home page.
   • Syslog type. Select the Syslog monitor to use with the threshold. This list is populated with Syslog monitors currently configured in the Passive Monitor Library.
   • Threshold. Select and enter the desired threshold criteria variables and values. The default threshold is configured to alert when the number of messages exceeds 500 in the past 60 minutes.
   • Devices to Monitor. Click Select to choose the devices to which the threshold applies. By default, the threshold monitors all devices on which the applicable monitor is enabled.
   • Notification. Select the notification policy to apply to this threshold. This policy begins sending notifications when an item is outside the configured threshold limits. If you do not see an appropriate threshold policy, or if the list is empty, click browse (...) to open the Notification Policy dialog and configure a new policy.

   Note: Notification policies are optional for most thresholds. If you do not select a notification policy, no notifications are generated for the threshold, but a dashboard report listing the out of threshold items still appears on the Alert Center Home page.

   • Threshold check. Enter a value for the threshold check interval, or the interval at which the Alert Center checks the Network Performance Monitor database to see if there are items that are outside the threshold parameters.
   • Select Automatically resolve items no longer out of threshold to have Alert Center automatically resolve items when they go back inside the parameters of the threshold.

   Note: Configure the threshold check interval for a longer time than the sampling interval for thresholds relating to trends, such as percent utilization. Configure it for a time the same as (or similar to) the sampling interval when configuring a threshold for a health check.
   
   Avoid setting the threshold check interval to a very short time, as this can degrade system performance. In general, setting the threshold check interval to less than five minutes is not adviced.

2. Click OK to save the threshold settings.

Clone a threshold based on a custom or built-in configuration:

1. Click on a threshold on the Thresholds Library panel you want to copy.
2. Click the Copy button, and click OK to create a new Syslog Threshold.

   The Edit Syslog Threshold dialog displays.

3. Save or customize your new threshold, either:
   • Type in a new value for Name field (or keep the default) and click OK to save to the Thresholds Library.
   • Follow the Edit Syslog Threshold instructions.

Delete an existing Syslog Threshold:

1. Select Syslog Threshold you want to delete from the Syslog Threshold panel.
2. Click the Delete button, and then click Yes to confirm the deletion.

   The Syslog Threshold configuration is deleted.