First, make sure that Windows monitoring is enabled and NetCrunch is successfully logged in on remote machine:
- rightclick on the device, select Monitoring->Windows Performance
- check [x] next to Enable
- place a check mark next to Monitor Windows Services
Then create the Threshold level event:
- right click on the node, select Alerting->Edit Node Alerting Policy
- click 'Add' button to add an event
- from 'Windows' tab, select 'Windows Application Performance Threshold'
- type in a general name for the event
- click on the blue text 'Performance counter' to select Windows counter
- select Performance Object (like MSExchangeIS mailbox)
- select counter (like Send Queue Size), click 'Add'
- set up the threshold
- click 'OK' when done
You've just defined the Event - now create the alert, to see the remainder of the steps see related articles: Configuring an Alert or Configuring an Action