How to create a threshold-based Aggregated alert profile?

    To create a new Aggregated alert profile, follow the steps below:

    1. Go to Settings > NetFlow > Alert Profiles > Aggregated
    2. Click on "Add"
    3. Enter profile name and description
    4. Select Source as Interface/IP group/Interface group/Access Point/SSID group and select all or any of the interfaces
    5. Next, provide time frame and other criteria such as:
      • Select Custom time range, or Periodic to select a start time and the time interval.
      • Select time zone
      • Enable/Disable business hour filter
      • Include/Exclude weekends
    6. Define threshold.
      • Select Utilization / Volume / Speed / Packets
      • To define threshold for Utilization, provide "<" or ">", utilization %, n times, minutes, severity and notification details
        Note: i. You can select the severity level as Critical, Trouble or Attention.
        ii. Notification can be either selected as Email / SNMP Trap / SMS / SDP Ticket
      • Save the profile

    threshold based alert profile

    How to create a threshold-based Real-Time alert profile?

    It involves 4 simple steps to create a new threshold based alert. Follow the steps below:

    threshold based alert profile

    1. Go to Settings > NetFlow > Alert Profiles > Real-Time
    2. Click on "Add" new profile
    3. Enter profile name and description
    4. Select Source as Interface/IP group/Interface group/Access Point/SSID group and select all or any of the interfaces
    5. Next,define criteria to generate alert for IN / OUT / combined traffic
    6. Define threshold,
      • Select Utilization / Volume / Speed / Packets
      • To define threshold for Utilization, provide "<" or ">", utilization %, n times, minutes, severity and notification details
        Note: i. You can select the severity level as Critical, Trouble or Attention.
        ii. Notification can be either selected as Email / SNMP Trap / SMS / SDP Ticket
      • Select time zone
      • Enable/Disable business hour filter
      • Include/Exclude weekends
      • Save the profile

    threshold based alert profile

    How to enable the link-down alert?

    Faster troubleshooting with advanced Forensics

    To enable "Link down" alert,

    1. Go to Settings > NetFlow > Alert Profiles.
    2. Click on "Link Down" Profile name.
    3. Edit Profile name if needed.
    4. Select interfaces.
    5. Provide email id or ticket details to send alerts.
    6. Optional: Get alert when no flow is received.
    7. Click Update.

    How to enable no flow alert?

    enable no flow alert

    To enable "No flow" alert follow the same steps as link down alert,

    1. Go to Settings > NetFlow > Alert Profiles
    2. Click on "Link Down" Profile name
    3. Edit Profile name if needed
    4. Select interfaces
    5. Provide email id or ticket details to send alerts.
    6. Click on no flow alert (alert when no flows are received for 5 mins)
    7. Click Update

    How to edit an existing alert profile?

    Click on Alert Profile Name under Settings > NetFlow > Alert Profile. Modify threshold / interfaces selection / alert name and Save.

    How do I get notified for a threshold violation? 

    Ans: A threshold violation can be notified in 3 ways:

    1. Email notification
    2. SNMP Trap
    3. SMS notification
    4. Log a ticket

    Go to "Define threshold" and provide the details:

    1. For Email notification provide email id.
    2. For SNMP Trap provide Server:Port:Community.
    3. For SMS notification provide mobile number.
    4. For logging the alert as a ticket, provide ticket details such as category, priority and the technician to whom it should be assigned to, and group.

    How to enable business hour alert?

    1. Click Settings > NetFlow > Alert Profile
    2. Click "Add"
    3. Under Criteria, click "enable" for Business Hour Alerts
    4. Provide other information for creating an Alert Profile
    5. Save the Alert Profile

    How to set an aggregated alert for custom time period?

    1. Go to Settings > NetFlow > Alert Profiles > Aggregated > Add
    2. Under Alert time period, select Custom
    3. Set the custom start and end date and time and time zone.
    4. You can also enable business hour alerts and exclude/include weekends.