SYNOPSIS

use Swatch::Threshold;

&Swatch::threshold( SWID => <int>, TYPE => <limit|threshold|both>, TRACK_BY => <key>, # like an IP addr COUNT => <int>, SECONDS => <int> );

SWATCH SYNTAX

threshold track_by=<key>, type=<limit|threshold|both>, count=<int>, seconds=<int>

DESCRIPTION

SWID is swatch's internal ID number for the watchfor block

TYPE can be limit, threshold, or both

Limit - Alert on the 1st COUNT events during the time interval, then ignore events for the rest of the time interval.

Threshold - Alert every COUNT times we see this event during the time interval.

Both Alert once per time interval after seeing COUNT occurrences of the event, then ignore any additional events during the time interval.

SECONDS is the time interval

AUTHOR

E. Todd Atkins, [email protected]

RELATED TO Swatch::Threshold…

perl\|(1), swatch\|(1).