Cisco Systems CSACS3415K9 Manual De Usuario
12-30
User Guide for Cisco Secure Access Control System 5.4
OL-26225-01
Chapter 12 Managing Alarms
Creating, Editing, and Duplicating Alarm Thresholds
If, in the past four hours, RBACL drops have occurred for two different source group tags as shown in
the following table, an alarm is triggered, because at least one SGT has a count greater than 10.
the following table, an alarm is triggered, because at least one SGT has a count greater than 10.
You can specify one or more filters to limit the RBACL drop records that are considered for threshold
evaluation. Each filter is associated with a particular attribute in the RBACL drop records and only those
records that match the filter condition are counted. If you specify multiple filter values, only the records
that match all the filter conditions are counted.
evaluation. Each filter is associated with a particular attribute in the RBACL drop records and only those
records that match the filter condition are counted. If you specify multiple filter values, only the records
that match all the filter conditions are counted.
Modify the fields in the Criteria tab as described in
Related Topics
•
•
•
SGT
Count of RBACL Drops
1
17
3
14
Table 12-23
RBACL Drops
Option
Description
RBACL drops
greater than num in the past time Minutes|Hours by a object, where:
•
num values can be any five-digit number greater than or equal to zero (0).
•
time values can be 1 to 1440 minutes, or 1 to 24 hours.
•
Minutes|Hours value can be Minutes or Hours.
•
object values can be:
–
NAD
–
SGT
–
DGT
–
DST_IP
Filter
Device IP
Click Select to choose or enter a valid device IP address on which to configure your threshold.
SGT
Click Select to choose or enter a valid source group tag on which to configure your threshold.
DGT
Click Select to choose or enter a valid destination group tag on which to configure your
threshold.
threshold.
Destination IP
Click Select to choose or enter a valid destination IP address on which to configure your
threshold.
threshold.