1,774
edits
Changes
m
==== Changing severity while the event storm is still active ====
→Changing severity while the event storm is still active: Changed heading level
# If the number of events that that are received over the information breach duration are added together and exceed the exception breach count then an event with the severity level of information is raised.
Once a storm rule is breached the event storm will continue to be monitored in the same manner as above to see whether there is an increase in severity. If there is an increase in severity of the event the event is increased in severity and the relivent notifications are sent out. Storm events do not decrease in severity.