To "bad"
This example shows how using the shortcut (To: bad) simplifies an alert definition file.
- Alert Name: EX11A
- Alert Type: protocol status
- Source: conn_1
- Source Count: all
- Comparing: == and error
- Duration: N seconds and 30
- Action type: notify
- Alert Name: EX11B
- Alert Type: protocol status
- Source: conn_1
- State From: up
- To: down
- Source Count: all
- Comparing: diff
- Duration: N seconds and 30
- Action type: notify
- Alert Name: EX11C
- Alert Type: protocol status
- Source: conn_1
- State From: up
- To: opening
- Source Count: all
- Comparing: diff
- Duration: N seconds and 30
- Action type: notify
- Alert Name: EX11D
- Alert Type: protocol status
- Source: conn_1
- State From: opening
- To: down
- Source Count: all
- Comparing: diff
- Duration: N seconds and 30
- Action type: notify
The equivalent alert behavior that is defined with a single "To: bad alert":
- Alert Name: EX11_ALL
- Alert Type: protocol status
- Source: conn_1
- To: bad
- Source Count: all
- Comparing: diff
- Duration: N seconds and 30
- Action type: notify