Filter
Top Products
12-30
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 12 Managing Alarms
Creating, Editing, and Duplicating Alarm Thresholds
If, in the past four hours, RBACL drops have occurred for two different source group tags as shown in
the following table, an alarm is triggered, because at least one SGT has a count greater than 10.
You can specify one or more filters to limit the RBACL drop records that are considered for threshold
evaluation. Each filter is associated with a particular attribute in the RBACL drop records and only those
records that match the filter condition are counted. If you specify multiple filter values, only the records
that match all the filter conditions are counted.
Modify the fields in the Criteria tab as described in Table 12-23.
Related Topics
• Creating, Editing, and Duplicating Alarm Thresholds, page 12-11
• Configuring General Threshold Information, page 12-13
• Configuring Threshold Notifications, page 12-32
SGT Count of RBACL Drops
117
314
Table 12-23 RBACL Drops
Option Description
RBACL drops greater than num in the past time Minutes|Hours by a object, where:
• num values can be any five-digit number greater than or equal to zero (0).
• time values can be 1 to 1440 minutes, or 1 to 24 hours.
• Minutes|Hours value can be Minutes or Hours.
• object values can be:
–
NAD
–
SGT
–
DGT
–
DST_IP
Filter
Device IP Click Select to choose or enter a valid device IP address on which to configure your threshold.
SGT Click Select to choose or enter a valid source group tag on which to configure your threshold.
DGT Click Select to choose or enter a valid destination group tag on which to configure your
threshold.
Destination IP Click Select to choose or enter a valid destination IP address on which to configure your
threshold.