I'd like to setup an alert that triggers of a particular condition is repeating 'x' number of times over 'y' period. i.e., if I have an interface going up/down...say..."more than 10 times" over a "30 sec" period, etc. - fire off an email. The kind of option I'm looking for can be found in the KiwiSyslog daemon product in that you can configure an FILTER and select the "Threshold" type, and configure that the filter is true if the event occurs ____ times in _____ seconds.
I have a particular "abnormal" condition that I need to detect when it takes place, and the easiest way for me to do that is to trigger an alert if an Interface changes to "Administrative Shutdown" 5 times in 60 seconds. Is there any way to configure an advanced alert to include something other than a single event/threshold? Any sort of, "If condition is made true 'x' times over 'y' seconds"?