This section describes how to search Alarm data that NetMon has collected for enabled Alarm Rules.
To search triggered Alarm data:
-
Open the NetMon Web Management interface.
-
On the top navigation bar, click Analyze, and then click Alarms Dashboard.
-
Define a duration by clicking Last 15 minutes in the time filter. You can then select an incremental amount of time—from 15 minutes to the past 5 years—a relative amount of time, or a specific date range.
-
In the search field, enter queries the same way you would on the Discover, Visualize, or Dashboard pages (using Lucene query syntax).
You can query using Alarm-specific metadata (for example, RuleName:Dropbox) or standard session metadata (for example, Application:Dropbox).