Intrusion event thresholds

An intrusion event threshold is a configuration setting that

• limits the number of times the system logs and displays an intrusion event based on how many times the event is generated within a specified time period,

• prevents you from being overwhelmed with a large number of identical events, and

• can be set per shared object rule, standard text rule, or inspector rule.