Advanced alert management designed to prevent alert floods

NetCrunch Platform Module

Advanced Monitoring
and Alerting

Set status for redundant connections with Business Status Node and avoid false positives with advanced thresholds and alerting conditions.

This module is included in

  • NetCrunch Suite

it can be added to any NetCrunch platform product.

@Performance Chart

Download NetCrunch Trial

Setting upper or lower threshold seems to be simple, right? What happens when the value is oscillating and goes over and under the threshold boundary every minute? Unfortunately, you get an alert every other minute.

This situation is just an example of why some simple models fall shortly sometimes, and you need to reach for a bit more advanced features like thresholds with separate reset boundary.

Another example might be when you want to react only if both of two connections fail, otherwise you need just a notification. Advanced monitoring algorithms are the answer to these specific needs that might be not frequent but sometimes indispensable.


    1. Use advanced alerting conditions to trigger alerts even when the event did not happen (like missing backup or heartbeat).
    2. Use Business Status Node to represent and calculate the status from multiple monitored elements.
    3. Use advanced thresholds to detect abnormal behavior and avoid false positives
  • Advance Alerting

    NetCrunch expands beyond traditional network device monitoring. Practically it's able to monitor any process and devices where reaction time does not have to be shorter than 15 seconds.

    @Alerting Conditions

    Conditional Alerts

    NetCrunch can process events from many external sources that can behave in the unusual way. That's why we have equipped NetCrunch in a range of additional conditions that you can add to any alert. NetCrunch provides conditional alerting which allows monitoring heartbeats or react to missing events. It also can make the alert less sensitive to repetitive events.


    All NetCrunch internal alerts are correlated. For other, external alerts (i.e. traps, syslog messages) it allows adding a list of actions to the alert that can close the alert. The alert can also be closed automatically after a given time. This kind of events have to occur on the same node.

    Another correlation can be defined for alerts happening on different nodes within the same time frame.

    Read more at Alert Conditions & Correlation

  • Business Status Node

    A node in NetCrunch is an Atlas entity, a group of services usually representing a network endpoint (interface)

    @Business Status Node

    Nevertheless, NetCrunch node can represent much more than just a network endpoint now, as the network monitoring model has evolved from simply looking at devices, then endpoints, to finally becoming the monitoring of a cloud of services.

    The node often doesn't need an IP address now. Such kind of node is a Business Status node that represents a state of a group of services (nodes, sensors service, or monitoring packs) that is calculated automatically.

    You can add multiple elements to each group which translate to a logical condition determining the state of the node.

    Business status can rely on another status node so you can simply create a path of critical services by building a chain of Business Status nodes.

  • Advanced Thresholds

    @Falling Threshold

    Unlike entry-level monitoring products, NetCrunch offers a vast range of threshold conditions, including baselines for professional usage.

    These thresholds will help you avoid false positive alerts and detect abnormal behavior or abrupt change of the monitored value,

    Event Triggers for Counters


NetCrunch is built upon solid statistical analysis. The program offers high accuracy with somewhat lower precision to achieve the high level of performance.

Raw Data

NetCrunch stores both raw data and pre-computed data samples. Depending on the level of analysis, the program uses different data streams to accurately present data on the screen (you need no more data than your screen can display).

NetCrunch Platform Modules

  • NetCrunch Platform Explore core features such as alerting, dashboards and intelligent maps with widgets, making NetCrunch most productive monitoring platform on the market Read more

  • SNMP & Core Monitoring Monitor devices and services availability using 70+ built-in protocol monitors and SNMPv1,v2c,v3 equipped with dozens Monitoring Packs and 8700+ Read more

  • Logs, Servers, Virtualization, and Application Monitoring Get wide coverage of monitoring by monitoring servers, operating systems, virtualization, SQL servers, Web and Cloud. Process text logs, syslog, traps, web message, and other event sources with ease... Read more

  • Hardware and Software Inventory for Windows Get everything you to monitor Windows machines and tracking hardware and software inventory Read more

  • Layer 2 Visualization Visualize layer-2 connections, VLANs and traffic on switch ports Read more

  • Traffic Flow AnalyzerAnalyze network traffic with flows (NetFlow, sFlow and other protocols) and use Cisco NBAR2 for application monitoring Read more

  • Integration ServicesIntegrate NetCrunch with Service Desk and productivity applications. Let NetCrunch forward data to an external system Read more

  • Advanced Monitoring and AlertingUse business status to reflect critical path and service dependencies, use advance condition to react to heartbeat or missing events. Set advanced threshold conditions on metrics to detect rapid changes or abnormal behavior. Read more

  • Advanced Configuration Manage multiple NetCrunch users, organizational groups, monitoring templates and create dynamic Atlas folders Read more