$config['alert']['macros']['rule']['dynamic_in_speed'] = '(%ports.ifInOctets_rate*8/1000000)';
$config['alert']['macros']['rule']['dynamic_out_speed'] = '(%ports.ifOutOctets_rate*8/1000000)';
$config['alert']['macros']['rule']['inbound'] = '%macros.dynamic_in_speed > SUBSTRING_INDEX(%ports.ifAlias,"/",-1)';
$config['alert']['macros']['rule']['outbound'] = '%macros.dynamic_out_speed > SUBSTRING_INDEX(%ports.ifAlias,"/",1)';