Under the network interface -> Wheel there's a new field named "JSON Host Rules"
that can accept JSON in the format below:
- target can be * (= all local hosts) or a specific IP address
- frequency can be hourly or daily and it specifies the timeperiod on which the condition is evaluated
- metric can be set to bytes, score or a L7 protocol supported in nDPI
- threshold is the numerical value over which the alert is triggered
[
{ "target": "*", "frequency": "hourly", "metric": "bytes", "threshold": 354333 },
{"target": "146.48.56.79","metric": "AmazonAWS","frequency": "daily","threshold": 5000 }
]
