Report thresholds

Saved reports can be used to set up custom thresholds to alert network and security teams to specified network behavior. Report thresholds are applied to the calculated/aggregated columns of reports (either per row or total) and will trigger alarms based on the options configured.

Note

To deliver Report Threshold Violation alarms, Plixer Scrutinizer automatically re-runs reports with custom thresholds in the background every 5 minutes. As such, having a large number of active report thresholds–particularly total reports (as opposed to rate)–may result in performance issues. The total number of concurrent report processes that can be run at a time for threshold checks can also be adjusted under Admin > Settings > Reporting.

To add a report threshold to a report, follow these steps:

1. After the report is run (and saved), click the gear button to open the options tray and select Threshold.

2. Select whether the threshold should be applied per row or to the total of the calculated column.

3. Select the appropriate comparison operator (>= or <=) for the desired criteria.

4. Enter the desired threshold (value and prefix).

To disable a report threshold, re-run the report and click the delete (X) button in the Filters tray of the output view.