|
|
|
The Event Threshold allows you to modify the limits that, when exceeded, indicate that an event occurred. Limits include the number of logs, and the timeframe in which they occurred:
Detect the event when more than x logs were detected over a period of y seconds.
To decrease the number of false alarms based on a particular event, increase the number of logs and/or the timeframe for them to occur.
