Configuring a Syslog threshold:

• Name. Used in the Threshold library and the title on the Alert Center Dashboard.
• Notification Policy. (Optional) Select the notification policy to apply to this threshold. The policy initiates notifications when an item is outside the configured threshold limits.
• Threshold Check Interval. Enter a time interval for Alert Center to check the Network Performance Monitor database for items that are out of the threshold limits.

  Automatically resolve items no longer out of threshold. Select this option if you want Alert Center to automatically resolve items when they return to the value within the threshold limit.

Note: Notification policies are optional for most thresholds. If you do not select a notification policy, no notifications are generated for the threshold, but a dashboard report listing the out of threshold items still appears on the Alert Center Home page.

Add Condition Rules:

• Syslog type. Select the Syslog monitor to use with the threshold. This list is populated with Syslog monitors currently configured in the Passive Monitor Library.
• Threshold. Select and enter the desired threshold criteria variables and values. The default threshold is configured to alert when the number of messages exceeds 500 in the past 60 minutes.

Select Applied Devices

• Apply to All Devices. By default, the threshold monitors all applicable hosts.

  Exclude Devices. Select to build or apply an exclusion list.

• Click Apply this Threshold to Specific Devices to choose the hosts to which the threshold applies.

  Note: Configure the threshold check interval for a longer time than the sampling interval for thresholds relating to trends, such as percent utilization. Configure it for a time the same as (or similar to) the sampling interval when configuring a threshold for a health check.

Tip: Avoid setting the threshold check interval to a very short time. Aggressive intervals can degrade system performance. In general, setting the threshold check interval to less than five minutes is not advised.

Configuring a Syslog threshold:

• Name. Used in the Threshold library and the title on the Alert Center Dashboard.
• Notification Policy. (Optional) Select the notification policy to apply to this threshold. The policy initiates notifications when an item is outside the configured threshold limits.
• Threshold Check Interval. Enter a time interval for Alert Center to check the Network Performance Monitor database for items that are out of the threshold limits.

  Automatically resolve items no longer out of threshold. Select this option if you want Alert Center to automatically resolve items when they return to the value within the threshold limit.

Note: Notification policies are optional for most thresholds. If you do not select a notification policy, no notifications are generated for the threshold, but a dashboard report listing the out of threshold items still appears on the Alert Center Home page.

Add Condition Rules:

• Syslog type. Select the Syslog monitor to use with the threshold. This list is populated with Syslog monitors currently configured in the Passive Monitor Library.
• Threshold. Select and enter the desired threshold criteria variables and values. The default threshold is configured to alert when the number of messages exceeds 500 in the past 60 minutes.

Select Applied Devices

• Apply to All Devices. By default, the threshold monitors all applicable hosts.

  Exclude Devices. Select to build or apply an exclusion list.

• Click Apply this Threshold to Specific Devices to choose the hosts to which the threshold applies.

  Note: Configure the threshold check interval for a longer time than the sampling interval for thresholds relating to trends, such as percent utilization. Configure it for a time the same as (or similar to) the sampling interval when configuring a threshold for a health check.

Tip: Avoid setting the threshold check interval to a very short time. Aggressive intervals can degrade system performance. In general, setting the threshold check interval to less than five minutes is not advised.

Clone a threshold based on a custom or built-in configuration:

1. Click on a threshold on the Thresholds Library panel you want to copy.
2. Click the Copy button, and click OK to create a new Syslog Threshold.

   The Edit Syslog Threshold dialog displays.

3. Save or customize your new threshold, either:
   • Type in a new value for Name field (or keep the default) and click OK to save to the Thresholds Library.
   • Follow the Edit Syslog Threshold instructions.

Delete an existing Syslog Threshold:

1. Select Syslog Threshold you want to delete from the Syslog Threshold panel.
2. Click the Delete button, and then click Yes to confirm the deletion.

   The Syslog Threshold configuration is deleted.