Showing results for 
Search instead for 
Did you mean: 

How to create a Custom Types?

I am doing an alarm using Field match. I want to take the value $ Event Count (Standard event Fields - Field Name). Event Count is not visible in the Custom Types, I can not choose a filter alarm. Write how to create in the Event Count Custom Types, please.

1 Reply

Re: How to create a Custom Types?


Can you elaborate on what exactly you are trying to accomplish, are you looking to set a threshold on the event count before an alarm will trigger? There is an and gate that you can place, and there should be a threshold option, that threshold option is used to define the event count you want to see before the alarm triggers.

I am uncertain if you can use thresholds in Field Match alarms in 9.4.x, however I know you can utilize the threshold in correlation and trigger an alarm off of the correlated data.

Thank you,