How do you setup an alert in Insight that provide you with the following:
Alert you if there is more than 100 Failed Authentication within 5 minutes. The goal is the create an alert that you let you know that there might be a radius or authentication or ad issues becuase large amount of users are unable to authenticate agaist clearpass.
When you use the default template in Insight: Radius Failed Authentication You can select Threshold and Interval. However, this alert only give you the amount of failed auth Accumulated in a internal so you might get 10 or 25 failed authentication but this does not mean necessariliy that there is a problem.
Should i use airwave instead?
Thank you
Nils