Table of Contents (Start)

Threshold Browser

The Threshold Browser enables you to manage thresholds. A threshold is the value that triggers an alert or a trap. The Threshold Browser enables you to define standalone thresholds to apply to a single device. The Policy Browser enables you to create thresholds that apply to multiple devices.

To access the Threshold Browser from the navigation bar, click the Events menu, select Configuration, and then select Threshold Browser.

The Welcome Dashboard provides a Thresholds link to access the Threshold Browser.

images/download/attachments/163972594/launchThresholdBrowser-version-1-modificationdate-1693242490206-api-v2.png

Click button Show Filter to expand the filter section. It displays controls that enable you to filter the list. When you click this button, tabs General and Specific are available.

images/download/attachments/163972594/thresholdBrowserShowFilter-version-1-modificationdate-1693242490195-api-v2.png

Click Hide Filter button to collapse the filter section.

Click Apply Filter button to apply the filter settings.

Click Clear Filter button to remove all filters and to display all thresholds in the list.

'General' Tab

In the filters section, the General tab provides the following general filters.

Select the Severity check box, then click the drop-down and select a comparison operator. Click the second drop-down and select a severity.
Click the Enabled drop-down.
- Select Any to display both enabled and disabled thresholds.
- Select Enabled to display only thresholds that are enabled.
- Select Disabled to display only thresholds that are disabled.
Click the Threshold Type drop-down.
- Select Stand Alone (custom) to display thresholds that are not associated with a policy.
- Select Policy Based to display thresholds that policies create.
- Select All types to display thresholds that meet the other filter criteria.
Click the Technology Type drop-down.
- Select All to display all policies.
- Select Flow to display thresholds that trigger based on flow data.
- Select Metric to display thresholds that trigger based on non-flow data.
In the Search ID field, enter the threshold identifier and select the Threshold ID option or enter the policy identifier and select the Policy ID option.
In the Search Text field, enter text that appears in the threshold name and/or the policy name and select the corresponding Threshold Name and/or Policy Name check box.
Click Apply Filter to apply filter set. Click Clear Filter to clear the filter set.

Example

Choose option All types from Threshold Type drop-down list and click button Apply Filter to view the list of thresholds that apply to the filter set.

images/download/attachments/163972594/thresholdbrowser-version-1-modificationdate-1693242490190-api-v2.png

'Specific' Tab

In the filters section, the Specific tab provides the following filters. Most selections are dependent on the preceding selection.

Click the Technology type drop-down.
- Select All to display all policies.
- Select Flow to display devices that trigger flow alerts.
- Select Metric to display devices that trigger non-flow alerts.
Click the Device drop-down and select the device that contains the indicator for the threshold you seek.
Click the Plugin drop-down and select the plugin that polls the indicator.
Click the Object drop-down and select the object that contains the indicator.
Click the Indicator drop-down and select the indicator that triggers the threshold.
Click Apply Filter to apply filter set. Click Clear Filter to clear the filter set.

Manage Thresholds

New Threshold

Click New Threshold button to create a new threshold. For details, please refer to Threshold Editor.

Existing Threshold(s)

After applying the filter, you receive a list of thresholds that apply to the filter set. Threshold list appears in the bottom-half of Threshold Browser page with the following columns.

ID - Displays the internal threshold identifier. ID format is x-y where x = Peer ID and y = Threshold ID.
Threshold Name - Displays the threshold name.
Technology Type - Displays Flow for thresholds triggered by flow data or displays Metric for thresholds triggered by all other non-flow data.
Policy Name - Displays the name of the policy that created the threshold. Displays Stand Alone when the threshold is not created from a policy.
Severity - Displays the severity level for alerts the threshold triggers.
Flags - Displays flags when you define the threshold to be emailed or to be scheduled.
- - Email
- - Schedule

Click a name in Threshold Name column to view the details for the selected threshold. Please refer to Threshold Editor for details.

Other

Select the check box for each threshold to manage, click images/download/attachments/163972594/actionold-version-1-modificationdate-1693242490213-api-v2.png , and select one of the following options.

Select Delete Selected to delete the thresholds selected in the list.
Select Disable Selected to disable the thresholds selected in the list. Disabled thresholds display in light text and do not trigger alerts or traps.
Select Enable Selected to enable the thresholds selected.