Hello,
I'm trying to setup useful alarms in netsight for DCS threshold events. Currently we have a very basic alarm setup that triggers when custom string "DCS Measured Noise" and "Exceeded Threshold of" are matched. These are syslog events sourced from the wireless controllers and netsight groups the events based on the source. This means that you can get 50 events pertaining to different AP's and netsight will trigger only one alarm per controller and raise the hit count for each new event.
So question number one is whether there is a crafty way to separate the events based on the AP they pertain to.
Once that is in place, we would also like to make the alarm trigger only if X number of events have occurred in Y amount of time.
Does anyone have experience in configuring such parameters or know whether it is possible? Thanks much.
