You can add or remove an event in the RMON event table that is associated with an RMON alarm number.
To configure RMON events, perform the following steps from privileged EXEC mode.
device# configure terminal
device(config)# rmon event 27 description Rising_Threshold log owner john_smith trap syslog
device(config)# end
device# copy running-config startup-config