How does the Threshold in GFI EventsManager's event processing rules work?