NAME

  Swatchdog::Threshold - Perl extension for thresholding in swatchdog(1)

SYNOPSIS

  use Swatchdog::Threshold;

  &Swatchdog::threshold(        SWID => <int>,
                        TYPE => <limit|threshold|both>,
                        TRACK_BY => <key>, # like an IP addr
                        COUNT => <int>,
                        SECONDS => <int>
                        );

SWATCH SYNTAX

  threshold track_by=<key>,
     type=<limit|threshold|both>,
     count=<int>,
     seconds=<int>

DESCRIPTION

  SWID is swatchdog's internal ID number for the watchfor block

  TYPE can be limit, threshold, or both

        Limit - Alert on the 1st COUNT events during the time interval,
           then ignore events for the rest of the time interval. 

        Threshold - Alert every COUNT times we see this event during the 
           time interval.

        Both
           Alert once per time interval after seeing COUNT occurrences of the
           event, then ignore any additional events during the time interval.

  SECONDS is the time interval

AUTHOR

SEE ALSO