No particular threshold is exceeded to generate this indication. If an event in the Event Log is within the first set of events (determined by MostNumberOfLogs) and has the Event ID of 9, this indication is sent.