Types of Rules

there are a series of settings that can be configured for each rule different configuration options are available for different types of rules for all rules you can configure the actions taken when a rule violation occurs this includes specifying whether or not notifications will be sent out and whether or not the state of the object will change threshold rules for rules that relate to thresholds, there are two types of thresholds value thresholds these thresholds determine the specific value that will escalate from to a "warning" and "error" state threshold the threshold fiels defines the condition for escalating to a "warning" and "error" state and also the condition to de escalate from "error" state to "warning" state and to "ok" state for example, a cpu usage rule can determine that if the cpu utilization reaches of above the 50% threshold, it will escalate to a "warning" state and if the value is above the 80% threshold, it will escalate to an "error" state trigger warning after x minutes above threshold to protect against "flapping", the rule also includes de escalation and escalation delays that require the object to spend the configured time (in minutes) in the higher/lower state to actually escalate/de escalate the state for example, the cpu has to be in under 80% for a period of 15 minutes in order to de escalate from "error" to "warning" state clear error after x minutes below threshold the amount of time that the state (error/warning) is maintained before it is cleared state over time thresholds for alerts that are based on a "boolean" state, whether it is boolean (e g , source offline) or because the exact value is not important (e g , cc errors or not recovered packets) threshold x% of a y minute window the threshold is defined by a time window and a percentage of time in which that window spent in the relevant state for example, 50% out of 6 minutes is an error threshold, so if a source reports a blank picture for 3 minutes out of the 6 min window, zm will put it into an error state however, if the warning threshold is 5% out of 60 minutes, if a source reports a blank picture for 3 minutes out of the 60 min window, zm will put it into a warning state trigger warning after x minutes above threshold to protect against "flapping", the rule also includes de escalation and escalation delays that require the object to spend the configured time (in minutes) in the higher/lower state to actually escalate/de escalate the state clear error after the rule also includes the amount of time that the state (error/warning) is maintained before it is cleared