How do I configure a summary event log filter?

Article ID: 484
Category: Event Log Monitoring
Updated: 2023-02-23

A summary event log filter allows for events to be collected over a period of time rather than sending you an alert or performing an action immediately. You can turn any Event Log filter to a recurring event filter by clicking the "Hour/Day" tab and setting the schedule type to "Summary."

If an event occurs during an inactive hour, then the event will be collected and sent out in the next active hour. If more than one hour is consecutively active, then all events that take place during this period will be processed immediately and will not be collected.

This is best explained with the example above: collected events will only be sent out Monday through Friday at 8AM. Events that take place between 8AM and 5PM will be sent out immediately and will not be collected. Events that take place between 5PM Wednesday and 8AMThursday will be collected and processed at 8AM.