The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Simple threshold alert

Published on Oct 5, 2026

1 minute(s) read

Prev Next

All alerts that have iv_alert.alertType = 15, are NTBA simple threshold alerts.

Note

Either the serviceId or applicationId will be -1 in an alert depending upon the type of the attack.

The details of the alert are as follows:

Number of bytes	Value
4	Service ID
4	Source VLAN ID
4	Destination VLAN ID

NTBA simple threshold type specific data

Was this article helpful?