We are running Prognosis 10.2 on HP NonStop systems.
I would like to set up a threshold, which will generate alert (send an email actually) in case that the same EMS event (example SSIDOWN = "TANDEM" AND SSIDNAME = "TELSERV" AND EVENTNUM = 10) will be created/issued by application 5 times in 5 minute or less time interval.
Hi There An interesting question. Firstly the interval can be any reasonable number of minutes or seconds. Considering these alert types: "1 matching event occurred." A threshold can do this. Note if 5 matching events occurred then you get 5 alerts. "1-or-more matching events occurred in the interval." A threshold can do this as a single alert with the Availability Threshold feature. "5-or-more matching events occurred in the interval." A threshold cannot do this as a single alert but an analyst should be able to.
Note that this is the threshold capability for NonStopEventEMS and other records of this type "historical" (where the key field is the timestamp). In contrast a threshold can alert on other types of records such as NonStopCpu such as: "5 consecutive intervals of CPU 1 BUSY > 10%" A threshold can do this.