Event alerts are triggered off user-defined events that are created in the Event Manager. For example, you can create an event that accumulates the number of Failed Logins per hour. In the alert definition, if the threshold exceeds 5, you can configure an email to be sent to the interested parties.

Note: Events that have the Display in Portal setting disabled are not available for generating alerts.

One event can be the trigger for multiple alerts. In the above example, you could create a higher-priority alert that is sent to the IT department if the threshold exceeds 20, which could indicate a problem with the web server.

Note: When creating ratio alerts, timestamps for events are assigned in real time, while session-end events for alerts receive a timestamp when the session closes, which might be in a different alert time period window. Unexpected ratio counts can be generated if these two types of events are mixed in ratio alerts. Whenever possible, compare events within the same timeframe. For example, groups aid in managing alert display and selection within Event Manager, or event groups and alert groups are separate and independent of one another.

To create an event alert:

1. In the Portal, select Configure > Event Manager.
2. In the Event Manager, click the Alerts tab.
3. In the toolbar, click New Event Alert.
4. Enter a name and description for the alert.

   If you don't enter a description, a default description is created by appending the event description to the text "Alert On - ". Descriptions do not have to be unique.

5. To assign the alert to an alert group, click Select. A new group name can be entered for the alert, or you can select an existing group that is selected from the drop-down.
6. To add an event group to your alert, click Select Event.
7. Select your event and choose a dimension group by clicking Dimension.

   After you choose a dimension group and click OK, you will be prompted to define the dimension and value. If you need to choose more than one dimension and value combination, click Add.

8. Activate the alert.
9. Configure the properties in each tab.
10. To save the alert, click Save Draft. The alert is saved to your local computer.
11. To commit the alert to the server, click Save Changes.

Alert definitions are saved separately from the event information. The Alert Service becomes aware of the new alert definition when the alert definitions are refreshed.

Typically, this interval is 10 minutes. To force a refresh, you can restart the Alert Service. However, this method causes all accumulated event alert counts to be reset to zero.