Problem automatically showing resolved in a minute but actually is not

[tasbirnitole]

For last few months I am getting a great unusual problem in my environment. I have some cisco switches and routers and I monitor the Operational Status of the interfaces, tunnels. It should trigger whenever any interface gets down and show resolved if the interface is up. Previously this was working fine. But recently I am getting the trigger whenever the problem occurs but it shows resolved by 1 minute. But actually the interface is not up. I am using Template Net Cisco IOS SNMPv2 with following expressions:

Problem Expression:

{$IFCONTROL:"Gi0/0/2"}=1 and ({KGDCL-CG-INT-RT:net.if.status[ifOperStatus.3].last()}=2 and {KGDCL-CG-INT-RT:net.if.status[ifOperStatus.3].diff()}=1)

Recovery expression:

{KGDCL_VPN_RT_01:net.if.status[ifOperStatus.26].last()}<>2 or {KGDCL_VPN_RT_01:net.if.status[ifOperStatus.26].diff()}=0





Can anyone explain and solve? May be somewhere I made any mistake.

[Markku]

Hi, in the template, remove the net.if.status[ifOperStatus.3].diff() part from the problem expression, and set "OK event generation" to Expression. Then the trigger will activate when the interface status is down (2), and deactivate when it is something else (usually 1 = up).

Markku

[tasbirnitole]

Dear Markku

Thanks for your response, however I solved the problem in a different way, I just changed the Recovery Expression from {KGDCL_VPN_RT_01:net.if.status[ifOperStatus.26].diff()}=0 to {KGDCL_VPN_RT_01:net.if.status[ifOperStatus.26].diff()}=1

As a result only when it gets [ifOperStatus.26].diff() value change yes(1) from last value or [ifOperStatus.26].last() unequal to 2 (usually 1 for up status) then it triggers recovery else not.