Hi all,
is it possible to make count function works based on data from Local Time insted of Timestamp column?
What I am trying to achieve:
Zabbix is processing snmp traps which comes from network device. Every trap contains time of its creation. When traps are processed they are stored in latest data the following way:
Timestamp column -> contains time when this trap was processed by zabbix(when snmpparser process had kicked in).
Local Tme -> contains real time extracted from SNMP trap datagram.
I have created lot of computed items using count function, e.g.:
count("DCM:snmptrap[\"@Devin_in\"]",5,"TS Sync","like",10)
The problem is that count is counting based on value from Timestamp column. Snmp traps are parsed every 5 seconds so I can see following entries in Latest Data:
Timestamp Local Time Value
2013.Dec.10 14:26:24 2013.Dec.10 14:26:23 14:26:23 2013/12/10 .1.3.6.1.4.1.1482.20.1.1.1.1.0.1 Normal "Status Events" 192.168.35.13 - CC Error Board 2, Port 3, TS 239.1.82.162:1234
2013.Dec.10 14:26:24 2013.Dec.10 14:26:21 14:26:21 2013/12/10 .1.3.6.1.4.1.1482.20.1.1.1.1.0.1 Normal "Status Events" 192.168.35.13 - CC Error Board 2, Port 3, TS 239.1.82.162:1234
2013.Dec.10 14:26:24 2013.Dec.10 14:26:20 14:26:20 2013/12/10 .1.3.6.1.4.1.1482.20.1.1.1.1.0.1 Normal "Status Events" 192.168.35.13 - Dejitter Buffer Reset Board 2, Port 3, TS 239.1.82.162:1234
What I need is make 'count' funtion works with data from Local Time column. Otherwise I get false alarms.
How can I do this?
In Zabbix version 2.0.9 I have tweaked snmptrapper.c and dbcache.c to insert Local TIme value to Timestamp column and it works fine. But in 2.2.0, architecture was changed and I am unable to tweak these files
Thank you.
Peter
is it possible to make count function works based on data from Local Time insted of Timestamp column?
What I am trying to achieve:
Zabbix is processing snmp traps which comes from network device. Every trap contains time of its creation. When traps are processed they are stored in latest data the following way:
Timestamp column -> contains time when this trap was processed by zabbix(when snmpparser process had kicked in).
Local Tme -> contains real time extracted from SNMP trap datagram.
I have created lot of computed items using count function, e.g.:
count("DCM:snmptrap[\"@Devin_in\"]",5,"TS Sync","like",10)
The problem is that count is counting based on value from Timestamp column. Snmp traps are parsed every 5 seconds so I can see following entries in Latest Data:
Timestamp Local Time Value
2013.Dec.10 14:26:24 2013.Dec.10 14:26:23 14:26:23 2013/12/10 .1.3.6.1.4.1.1482.20.1.1.1.1.0.1 Normal "Status Events" 192.168.35.13 - CC Error Board 2, Port 3, TS 239.1.82.162:1234
2013.Dec.10 14:26:24 2013.Dec.10 14:26:21 14:26:21 2013/12/10 .1.3.6.1.4.1.1482.20.1.1.1.1.0.1 Normal "Status Events" 192.168.35.13 - CC Error Board 2, Port 3, TS 239.1.82.162:1234
2013.Dec.10 14:26:24 2013.Dec.10 14:26:20 14:26:20 2013/12/10 .1.3.6.1.4.1.1482.20.1.1.1.1.0.1 Normal "Status Events" 192.168.35.13 - Dejitter Buffer Reset Board 2, Port 3, TS 239.1.82.162:1234
What I need is make 'count' funtion works with data from Local Time column. Otherwise I get false alarms.
How can I do this?
In Zabbix version 2.0.9 I have tweaked snmptrapper.c and dbcache.c to insert Local TIme value to Timestamp column and it works fine. But in 2.2.0, architecture was changed and I am unable to tweak these files
Thank you.
Peter
Comment