session sudden-change alarm-threshold
Function
The session sudden-change alarm-threshold command sets an alarm threshold for the sudden change of the session.
The undo session sudden-change alarm-threshold command restores the default value.
Format
session sudden-change alarm-threshold threshold-value [ baseline baseline-value ]
undo session sudden-change alarm-threshold
Parameters
| Parameter | Description | Value |
|---|---|---|
threshold-value |
Specifies an alarm threshold for the sudden change of the session. |
The value is an integer ranging from 1 to 100, in percentages. The default value is 20. |
baseline-value |
Specifies the start alarm threshold for the session usage. |
The value is an integer ranging from 1 to 100, in percentages. The default value is 10. NOTE:
If the session usage in the current time point and the previous time point are both smaller than the start alarm threshold, the device does not send an alarm even if the change rate of the session reaches the alarm threshold. |
Usage Guidelines
For the sudden change alarm threshold and start alarm threshold, you are advised to use the default values. Overly small values may cause the device to output excessive alarms, and overly large values may prevent alarms from being output.
The change rate refers to the change rate of the session within 10s.
The formula for calculating the change rate: Change rate = |Session number in the last time point - Session number in the current time point|/Session number in the last time point.
When the change number of the session in a specific period reaches the alarm threshold for the sudden change of the session and the session usage is greater than the start alarm threshold, alarm FWD_1.3.6.1.4.1.2011.6.122.15.3.4.7 hwSecStatSuddenChangeTrapOverThreshold is sent. Before setting an alarm threshold for the sudden change of the session, you must run the session sudden-change alarm enable command to enable the alarm function for the sudden change of the session.
For example, the alarm threshold for the sudden change of the session is 30%, the start alarm threshold for the session usage is 15%, the current session number is 60, and the session number is 40 ten seconds ago; the change rate of the session is 50%, which is greater than the alarm threshold for the sudden change of the session, and the session usage is grater than the start alarm threshold As a result, an alarm is sent.
For example, the alarm threshold for the sudden change of the session is 30%, the start alarm threshold for the session usage is 15%, the current session number is 20, and the session number is 10 ten seconds ago; the change rate of the session is 100%, and both the start and current session usage are smaller than the start alarm threshold. As a result, no alarm is sent.
The session usage indicates the maximum value obtained by the number of current sessions divided by the number of sessions on the device.