The Aggregation tab of the Filter Editor allows you to restrict similar events from incurring alarms unless a specified number of them occur within a specified time span. You define what makes them similar by indicating which fields must have matching values.
To configure event threshold and group settings
- In the Alarm after X Event Occurrences field, enter the number of times similar events must occur before an alarm is incurred.
- In the Within X Hrs. X Mins. X Secs. fields, enter the time span during which the specified number of similar events must occur before an alarm is incurred.
- In the Group Events Having Identical Values in the Following Fields list, select the fields that must have matching values to be included in the aggregation.
- When you complete the Aggregation tab, click Next to move to the next tab.