In your case, you will get an alert when ANY 3 traps come in. The system doesn't aggregate on it's own. It uses your criteria (incoming IP, OID, etc) to identify alerts that match and those that don't. THEN the quantity comes into play.
↧
In your case, you will get an alert when ANY 3 traps come in. The system doesn't aggregate on it's own. It uses your criteria (incoming IP, OID, etc) to identify alerts that match and those that don't. THEN the quantity comes into play.