Windows Event Log Threshold

From the WhatsUp Gold navigation menu:

1. Select SETTINGS menu > Alerts and Actions > Alert Center.

   Alert Center Libraries view displays.

2. Click Thresholds Library panel (to expand it if collapsed).

   The Thresholds Library displays.

3. On the Thresholds Library panel, click the "add" button ().

   The Select Threshold Type dialog displays.

4. Choose Windows Event Log Threshold and click OK. (This adds a new Windows Event Log Threshold to your library.)

   The New/Edit Windows Event Log Threshold Alert dialog displays. (Now, you must configure your Windows Event Log Threshold.)

5. Edit the Windows Event Log Threshold configuration.

To configure a Windows Event Log threshold:

1. Configure the following:
   • Name. Specify a name for the threshold. This name helps you identify the threshold in the Threshold library and displays as the report title on the Alert Center Home page.
   • Windows event type. Select the Windows Event Log monitor to use with this threshold. The list is populated with Windows Event Log monitors currently configured in the Passive Monitor Library.
   • Threshold. Select and enter the desired threshold criteria variables and values. The default threshold is configured to alert when the number of events exceeds 500 in the past 60 minutes.
   • Devices to Monitor. Click Select to choose the devices to which the threshold applies. By default, the threshold monitors all devices on which the applicable monitor is enabled.
   • Notification. Select the notification policy to apply to this threshold. This policy begins sending notifications when an item is outside the configured threshold limits. If you do not see an appropriate threshold policy, or if the list is empty, click browse (...) to open the Notification Policy dialog and configure a new policy.

   Note: Notification policies are optional for most thresholds. If you do not select a notification policy, no notifications are generated for the threshold, but a dashboard report listing the out of threshold items still appears on the Alert Center Home page.

   • Threshold check. Enter a value for the threshold check interval, or the interval at which the Alert Center checks the Network Performance Monitor database to see if there are items that are outside the threshold parameters.

   Note: Configure the threshold check interval for a longer time than the sampling interval for thresholds relating to trends, such as percent utilization. Configure it for a time the same as (or similar to) the sampling interval when configuring a threshold for a health check.
   
   Avoid setting the threshold check interval to a very short time, as this can degrade system performance. In general, setting the threshold check interval to less than five minutes is not advised.

   • Select Automatically resolve items no longer out of threshold to have Alert Center automatically resolve items when they go back inside the parameters of the threshold.
2. Click OK to save the threshold settings.

Clone a threshold based on a custom or built-in configuration:

1. Click on a threshold on the Thresholds Library panel you want to copy.
2. Click the Copy button, and click OK to create a new Windows Event Log Threshold.

   The Edit Windows Event Log Threshold dialog displays.

3. Save or customize your new threshold, either:
   • Type in a new value for Name field (or keep the default) and click OK to save to the Thresholds Library.
   • Follow the Edit Windows Event Log Threshold instructions.

Delete an existing Windows Event Log Threshold:

1. Select Windows Event Log Threshold you want to delete from the Windows Event Log Threshold panel.
2. Click the Delete button, and then click Yes to confirm the deletion.

   The Windows Event Log Threshold configuration is deleted.