Ratio Based Alert
The Ratio Based Alert triggers when the percentage of a specified message type exceeds or falls below specified percentages. For example, the Denied/(Accept+Denied) Alert Ratio can be used to trigger an alert when the number of Denied messages exceeds 90% of the Accept and Denied message count.
Example
“FewerThan/100//MoreThan/10//ratio/Accept/Total”
The following table lists the Ratio Based Alert-specific parameters. You must include the parameters as inputs for the alertRules parameter.
| Parameter | Description | Values | Required | Type |
|---|---|---|---|---|
| FewerThan | Minimum percentage of messages (by ratio specified by ratio parameter) that must be received before an alert is generated. If the number of messages drops below the FewerThan value, then an alert is generated.
The FewerThan and MoreThan parameters make up the alert range for the value specified by the ratio parameter. |
Any positive integer between 1 and 100. | yes | string |
| MoreThan | Maximum percentage of messages (by ratio specified by ratio parameter)) that must be received before an alert is generated. If the number of messages drops below the FewerThan value, then an alert is generated.
The FewerThan and MoreThan parameters make up the alert range for the value specified by the ratio parameter. |
Any positive integer between 1 and 100. | yes | string |
| Ratio | Message count ratio for the specified alert. | Possible values:
Accept/Total Deny/Total Login Success/Total Login Failure/Total Accept/(Accept+Denied) Denied/(Accept+Denied) Login Success/(Success+Failure) Login Failure/(Success+Failure) You must substitute %2F for each forward slash. (The F is case-sensitive.) For example: Accept%2FTotal. |
yes | string |