Define the event by following these steps:
- right click on the node, select Alerting-->Edit Node Alerting Policy (note: switch needs to be SNMP enabled)
- click 'Add' button to add an event
- from 'SNMP' tab select 'SNMP Performance Threshold'
- type in a Description or a general name for the event
- to select counter, click on blue text: 'performance counter'
- from the 'Performance object' pull down menu, select 'Interfaces'
- in the left hand list select 'bytes sent' or 'bytes received'
- in the right hand list under "Select instance from list", select port (example: RMON PORT 3 on UNIT 2)
- set acceptable value (for example 1000000 bytes) 10 click 'OK' twice
- now double click on the event you've just defined, to add an action
You've just defined the Event -- now create the alert or action, to see the remainder of the steps see related article: Configuring an Alert or Configuring an Action