Orion Alert Suppression syslog messages limiting

this is from the manual:

Configuring Syslog Viewer Filters and Alerts       The Syslog Viewer can be configured to signal Orion NPM alert actions when Syslog messages that are received from network devices match defined rules. The steps in the following procedure establish rules that filter Syslog messages and initiate alert actions as you determine.       To configure Syslog Viewer filters and alerts:      
1.      Click Start > All Programs > SolarWinds Orion > Syslog and SNMP Traps > Syslog Viewer.       2.      Click File > Settings.      
3.      Click View > Alerts/Filter Rules.      
4.      If you are creating a new rule, click Add New Rule.      
5.      If you are editing an existing rule, select the rule, and then click Edit Selected Rule.      
6.      Select the General tab.      
7.      Type a Rule Name, and then check Enabled to enable the rule.      
8.      Select appropriate servers from the Apply this Rule to list.      
9.      Enter the IP addresses or subnets to which this rule applies in the Source IP Addresses area.        Note: Use the examples provided on this tab to ensure that the list of source IP addresses is properly formatted.      
10.      If you want to limit the rule to only messages from specific hosts, domains, or hostname patterns, select the DNS Hostname tab, and then enter a DNS Hostname Pattern.       Note: When Use Regular Expressions in this Rule is checked, you may use regular expressions in place of like statements. For more information about using regular expressions in Orion NPM, see Regular Expression Pattern Matching.      
11.      If you want to limit the rule to only specific message types or text within a Syslog message, click the Message tab, and then enter rules for one or both of Message Type Pattern and Syslog Message Pattern.       Notes:                                                       "                                               Use the examples listed on this tab to format the list properly.                                                                                               "                                               When Use Regular Expressions in this Rule is checked, regular expressions can be used in place of like statements. For more information about regular expressions, see Regular Expression Pattern Matching.                                              
12.      Click the Severity / Facility tab.      
13.      Check the severity and facility types you want to apply.       Note: By default, all message severities and facilities are selected. For more information about Syslog severities and facilities, see Syslog Message Priorities.      
14.      If you want to limit rule application to within a specific period of time, select the Time of Day tab, check Enable Time of Day checking, enter the time period, and then check the days of the week on which to apply the rule.       Notes:                                                       "                                               Enabling Time of Day checking creates more overhead for the CPU.                                                                                               "                                               Messages received outside the specified timeframe will not trigger alerts.                                              
15.      If you want to suppress alert actions until a specified number of messages arrive that match the rule, complete the following procedure:       a.      Select the Trigger Threshold tab.       b.      Check Define a Trigger Threshold for this Rule.       c.      Enter option values as appropriate.       Note: When Suspend further Alert Actions for is checked, alert actions are not sent until the specified amount of time has expired. Once the time period has expired, only new alerts are sent. All alerts suppressed during the time period are discarded.      
16.      Select the Alert Actions tab.      
17.      If you are associating a new action to the rule, click Add New Action, and then select an action from the list to configure. For more information about available actions, see Available Syslog Alert Actions.       Note: Syslog alerts use a unique set of variables. For more information about available Syslog variables, see Syslog Alert Variables.      
18.      If you are editing an existing action for the rule, complete the following steps:       a.      Select an action from the list, and then click Edit Selected Action.       b.      Configure the action as appropriate. For more information about available actions, see Available Syslog Alert Actions.       Note: Syslog alerts use a unique set of variables. For more information about available Syslog variables, see Syslog Alert Variables.
      19.      If you need to delete an action, select the action, and then click Delete Action.      
20.      Use the arrow buttons to arrange the order in which actions are performed.       Note: Actions are processed in the order they are listed, from top to bottom.      
21.      Click OK to save all changes and return to Syslog Viewer Settings.
      22.      Use the arrow buttons to arrange the order in which the rules are applied.       Note: Rules are processed in the order they appear, from top to bottom.

http://www.solarwinds.com/NetPerfMon/SolarWinds/wwhelp/wwhimpl/js/html/wwhelp.htm