The Alarm Filters (Toll Fraud Detection)
ALARM FILTER 1:
1. Deﬁne Format
2. Display Clue Details
3. Deﬁne Clues
4. Edit Clues
5. Delete Clues
6. Deﬁne Alarm Review Schedule
Press <ESC> to return to previous menu ...
Figure 9.2: Alarm Filter Conﬁguration Menu (Alarm Filter 1 Shown)
9.3. The Alarm Filter Configuration Menus
The Alarm Filter Conﬁguration menus (Figure 9.2) are used to set-up the
two Alarm Filters. Each ﬁlter has its own conﬁguration menu, and both
menus are accessed from the general Alarm Conﬁguration menu
(Figure 9.1). Both menus include the following options:
1. Deﬁne Format: The Alarm ﬁlter Format (see Section 9.4.)
2. Display Clue Details: This item is used to review the parameters
assigned to each Clue.
3. Deﬁne Clues: The criteria that determine if each record should be
ﬂagged and counted. Section 9.5 describes Alarm Clue deﬁnition.
4. Edit Clues: Allows the user to edit or alter existing Clues.
5. Delete Clues: Deletes clues as described in Section 9.5.2.
6. Deﬁne Alarm Review Schedule: This item is used to indicate your
normal business hours. When clues are deﬁned, this allows each
clue to count the number of times that a speciﬁc event occurs within
business hours, and also the number of times that the event occurs
outside of normal business hours. (Default = 08:00 to 17:00,
Monday through Friday.)
• Since the NetLink II uses the Alarm Review Schedule to
determine Business Hours and Non-Business hours, it is very
important to accurately deﬁne the Alarm Review Schedule.
Business Hours and Non-Business hours are used when counting
alarm events and resetting the alarm counters.
• If the Alarm Review Schedule is cleared, then the Non-Business
Hours Threshold and Duration will be applied to all clues for this
ﬁlter, and the Business Hours Threshold and Duration will
not be applied.