Thwack,
I am currently looking to active an alert every time I see more that three interface down events from the same interface within a 5 min period of time. I am currently trying to active the alert through a custom SQL query. I have a an idea of what I need to do but and confused at which table the Events on the webpage use. Once I can use that table I can monitor that for multiples of interface downs. Below is what I have now. Please not that it is not working as desired but translate the idea to event notification rather that monitoring other alerts. Reduce alerts is the effort here.
Thanks in advance,
SELECT (AlertStatus)
FROM TriggerCount , ObjectType , ObjectName , TriggerTimeStamp
WHERE
(
(TriggerTimeStamp) > DATEADD(minute, -5, GETDATE()) AND
(TriggerTimeOffset >= 3) AND
(ObjectType = Interface) AND
(ObjectName = ObjectName)
)
