Setting Up Prevalence Event Thresholds
Org Admins can configure Prevalence Event Thresholds to control how prevalent issues are identified. Values must be between 0.01% and 99.99%, with up to two decimal places. If no decimal is provided, the value is treated as a whole number. Trailing zeros (e.g., 4.00) are ignored, and values with more than two decimal places are not accepted.
Default threshold values:
- 24 hours: 10%
- 7 days: 5%
- 30 days: 2%
To Update Thresholds
- Navigate to Configuration & Settings > TSFA Settings.
- Open the Prevalence Model tab.
- Click Edit.
- Enter the desired threshold values.
- Click Save.
- Updates do not affect issues previously identified as prevalent.
- New threshold values take effect the following day at approximately 1:00 AM, when the Prevalence Model runs again.
For more information, read TSFA Incident Overview.
Related Articles
TSFA Incident Overview
The TSFA Incident Overview provides a centralized view of all TSFA Security incidents detected across your fleet. It enables administrators to monitor and export events efficiently from a single, organized workspace. Prevalence Incidents Tab To ...
TSFA Security Event Log Reference
This document provides a structured overview of key security-related incidents logged by ThinkShield Firmware Assurance. Events are categorized based on their nature, severity, and potential impact. Each event includes a brief description, its ...
Setting Up Organization Accounts
Accessing Your Account When your organization's portal is created, a single administrative account will be created. The IT Owner (Org Admin) specified to Lenovo at the time of sale will receive a Lenovo Device Orchestration (LDO) e-mail indicating ...
Remote BIOS Access and Configuration
This feature enables Org and MSP Admins to remotely change the BIOS password and manage BIOS settings through Device Management. You can change BIOS settings either through Policy Management > ThinkBios Management > BIOS Settings, or directly via ...
Utilization Summary Report
This chart provides a fleet-wide perspective of device utilization for CPU, Memory, and GPU. It includes categorized device statuses (over-utilized, under-utilized, and normal utilization) with fully configurable thresholds. To access this feature go ...