1,774
edits
Changes
m
→How event storms are detected
== How event storms are detected ==
The informational, warning or exception event breach duration windows threshold breaches are compared with the total number of actual events that have been received during the each specified breach duration time periodwindow. If a breach is detected then the one with the highest severity either creates a new storm event or increments the duplicate count of the pre-existing one.
==== Changing severity while the storm is still active ====