Filters—Aggregation

This page uses adding filters to an Alarm Rule as an example. The names of windows and setting options vary slightly depending on where you are creating or modifying a filter.

The Aggregation tab of the Filter Editor allows you to restrict similar events from incurring alarms unless a specified number of them occur within a specified time span. You define what makes them similar by indicating which fields must have matching values.

To configure event threshold and group settings

1. In the Alarm after X Event Occurrences field, enter the number of times similar events must occur before an alarm is incurred.
2. In the Within X Hrs. X Mins. X Secs. fields, enter the time span during which the specified number of similar events must occur before an alarm is incurred.
3. In the Group Events Having Identical Values in the Following Fields list, select the fields that must have matching values to be included in the aggregation.
4. When you complete the Aggregation tab, click Next to move to the next tab.