Preventing redundant alerts that would be caused by normal process shutdown

In this example, conn_1 thread belongs to process process1. To prevent duplicate alerts when process1 is shut down, check Thread Only.

  • Alert Name:EX5A
  • Alert Type: thread status
  • Source: conn_1
  • Thread Only: selected
  • Source Count: all
  • Comparing: == and down
  • Duration: once
  • Action type: notify
  • Alert Name: EX5B
  • Alert Type: protocol status
  • Source: process1
  • Source Count: all
  • Comparing: == and dead
  • Duration: once
  • Action type: notify