Some alerts can be set with specific time or other limitations. Enabling these thresholds reduces the number of notifications sent based on the Alert Rule. Note the following information about thresholds:
Notifications are not sent unless a threshold is exceeded. However, an alert will appear in the Alert Log regardless of whether a threshold is exceeded.
The Alert Log notes the threshold type in the Type column of the alert.
Notifications prefix threshold information with "intel" (subject line, name, type, etc.).
Refer to Alert Type Categories and Definitions for more information about specific thresholds.