Chapter 12 Managing Alarms

Creating, Editing, and Duplicating Alarm Thresholds

If, in the past four hours, RBACL drops have occurred for two different source group tags as shown in the following table, an alarm is triggered, because at least one SGT has a count greater than 10.

SGT

Count of RBACL Drops

117

314

You can specify one or more filters to limit the RBACL drop records that are considered for threshold evaluation. Each filter is associated with a particular attribute in the RBACL drop records and only those records that match the filter condition are counted. If you specify multiple filter values, only the records that match all the filter conditions are counted.

Modify the fields in the Criteria tab as described in Table 12-23.

Table 12-23

RBACL Drops

 

 

 

 

Option

 

Description

 

 

 

RBACL drops

 

greater than num in the past time MinutesHours by a object, where:

 

 

num values can be any five-digit number greater than or equal to zero (0).

 

 

time values can be 1 to 1440 minutes, or 1 to 24 hours.

 

 

MinutesHours value can be Minutes or Hours.

 

 

object values can be:

 

 

NAD

 

 

SGT

 

 

DGT

 

 

DST_IP

 

 

 

 

Filter

 

 

 

 

 

 

Device IP

 

Click Select to choose or enter a valid device IP address on which to configure your threshold.

 

 

 

SGT

 

Click Select to choose or enter a valid source group tag on which to configure your threshold.

 

 

 

DGT

 

Click Select to choose or enter a valid destination group tag on which to configure your

 

 

threshold.

 

 

 

Destination IP

 

Click Select to choose or enter a valid destination IP address on which to configure your

 

 

threshold.

 

 

 

 

Related Topics

Creating, Editing, and Duplicating Alarm Thresholds, page 12-11

Configuring General Threshold Information, page 12-13

Configuring Threshold Notifications, page 12-32

 

User Guide for Cisco Secure Access Control System 5.3

12-30

OL-24201-01

Page 358
Image 358
Cisco Systems OL-24201-01 manual Nad, Dgt, Dstip, 12-30