SysLog - Send Alert when event is seen more than x times over y minutes

Hi there, as I do recall there was come conditions under the old SysLog server if an SysLog entry is seen over x times over y minutes, it will fire an alert off. Is there a way to set this up under the new Log Analyzer, Free version? I have unlimited NPM and NCM. I am thinking this may require some SQL Magic

Here is what I an trying to do: If SysLog sees 20 access points drop from our wireless controllers over a 2 min window, we would get an alert. Our controllers may have gone bonkers again and need to start looking at it. 

Parents Reply Children
No Data