To "bad"

This example shows how using the shortcut (To: bad) simplifies an alert definition file.

  • Alert Name: EX11A
  • Alert Type: protocol status
  • Source: conn_1
  • Source Count: all
  • Comparing: == and error
  • Duration: N seconds and 30
  • Action type: notify
  • Alert Name: EX11B
  • Alert Type: protocol status
  • Source: conn_1
  • State From: up
  • To: down
  • Source Count: all
  • Comparing: diff
  • Duration: N seconds and 30
  • Action type: notify
  • Alert Name: EX11C
  • Alert Type: protocol status
  • Source: conn_1
  • State From: up
  • To: opening
  • Source Count: all
  • Comparing: diff
  • Duration: N seconds and 30
  • Action type: notify
  • Alert Name: EX11D
  • Alert Type: protocol status
  • Source: conn_1
  • State From: opening
  • To: down
  • Source Count: all
  • Comparing: diff
  • Duration: N seconds and 30
  • Action type: notify

The equivalent alert behavior that is defined with a single "To: bad alert":

  • Alert Name: EX11_ALL
  • Alert Type: protocol status
  • Source: conn_1
  • To: bad
  • Source Count: all
  • Comparing: diff
  • Duration: N seconds and 30
  • Action type: notify