Can Change Auditor send alerts only when a number of events occur in a certain amount of time?
说明
Administrators may want to configure an alert to be sent only when a number of events occur in a certain amount of time. For example, if one "File Deleted" event is received, no alert is sent. However, if 10 "File Deleted" events are received in one minute, an alert is sent.
解决办法
This can be achieved using Smart Alerts. The following steps discuss how a Smart Alert can be setup:
On the What tab, click the drop-arrow next to the add button
Select "Event Class"
Locate the event in the list to be reported on and highlight it
Click Add | Add this event
Click OK
On the Alert tab, check the "SMTP" check box
Enter the required email information and click OK
Check the "Smart Alert enabled" check box
Specify the number of events that must occur within a specified time interval before generating/dispatching the alert. Where: <interval> is one of the following: minutes, hours or days