({TRIGGER.VALUE}=0&({MDF-Acceso2:ifOperStatus[GigabitEthernet2/0/33].max({$DETECT_INT_DOWN})}=2 &
{MDF-Acceso2:ifAdminStatus[GigabitEthernet2/0/33].max({$DETECT_INT_DOWN})}=1))
|
({TRIGGER.VALUE}=1&({MDF-Acceso2:ifOperStatus[GigabitEthernet2/0/33].min({$DETECT_INT_FLAP_THRESHOLD})}=2 &
{MDF-Acceso2:ifAdminStatus[GigabitEthernet2/0/33].max({$DETECT_INT_FLAP_THRESHOLD})}=1))
Hello Zabbix community, I've been trying this great product and normally I can find the answers by looking at the forums or googling, but this time I am a bit lost.
I am trying tu use hysteresis and I am not sure why the trigger is not working.
We have a bunch of switches where we have critical servers and not so critical servers connected. For example our core switch will have all stuff connected there as critical, and one of our distribution switches will have servers not so critical.
The customer wants us to report immediately when an interface goes down in the core switch, but wait (let's say 10 minutes) if an interface goes down in the other switches.
I am using templates to discover interfaces and building the triggers, so I am basically using user macros to control the timing and not hard coded values in the templates to try to solve the timing issue. But, the trigger I have built does not work, specially if an interface is flapping, it will alert me many times.
This is how my trigger looks like with some comments of what I am trying to do.
Problem starts when ifOperStatus = 2 (down) and ifAdminStatus = 1 (up) (we just want to alert when interface goes down, not when we shut down a port.
{$DETECT_INT_DOWN} is a user macro local to the host where it will have different values for example #5 for the core switch and #30 for other switches.
The trigger should continue in the problem state if at least one value during {$DETECT_INT_FLAP_THRESHOLD} for ifOperStatus = 2 and ifAdminStaus = 1 during the same time frame. Problem ends as soon as IfOperStatus = 1, or ifAdminStatus = 2 (that means we shut down the port)
If the interface does not flap, the trigger works fine, but as soon as it starts flapping, it will alert me many times.
({TRIGGER.VALUE}=0&({MDF-Acceso2:ifOperStatus[GigabitEthernet2/0/33].max({$DETECT_INT_DOWN})}=2 &
{MDF-Acceso2:ifAdminStatus[GigabitEthernet2/0/33].max({$DETECT_INT_DOWN})}=1))
|
({TRIGGER.VALUE}=1&({MDF-Acceso2:ifOperStatus[GigabitEthernet2/0/33].min({$DETECT_INT_FLAP_THRESHOLD})}=2 &
{MDF-Acceso2:ifAdminStatus[GigabitEthernet2/0/33].max({$DETECT_INT_FLAP_THRESHOLD})}=1))
Can you spot where am I screwing this up?
Thanks a lot for your kind help
{MDF-Acceso2:ifAdminStatus[GigabitEthernet2/0/33].max({$DETECT_INT_DOWN})}=1))
|
({TRIGGER.VALUE}=1&({MDF-Acceso2:ifOperStatus[GigabitEthernet2/0/33].min({$DETECT_INT_FLAP_THRESHOLD})}=2 &
{MDF-Acceso2:ifAdminStatus[GigabitEthernet2/0/33].max({$DETECT_INT_FLAP_THRESHOLD})}=1))
Hello Zabbix community, I've been trying this great product and normally I can find the answers by looking at the forums or googling, but this time I am a bit lost.
I am trying tu use hysteresis and I am not sure why the trigger is not working.
We have a bunch of switches where we have critical servers and not so critical servers connected. For example our core switch will have all stuff connected there as critical, and one of our distribution switches will have servers not so critical.
The customer wants us to report immediately when an interface goes down in the core switch, but wait (let's say 10 minutes) if an interface goes down in the other switches.
I am using templates to discover interfaces and building the triggers, so I am basically using user macros to control the timing and not hard coded values in the templates to try to solve the timing issue. But, the trigger I have built does not work, specially if an interface is flapping, it will alert me many times.
This is how my trigger looks like with some comments of what I am trying to do.
Problem starts when ifOperStatus = 2 (down) and ifAdminStatus = 1 (up) (we just want to alert when interface goes down, not when we shut down a port.
{$DETECT_INT_DOWN} is a user macro local to the host where it will have different values for example #5 for the core switch and #30 for other switches.
The trigger should continue in the problem state if at least one value during {$DETECT_INT_FLAP_THRESHOLD} for ifOperStatus = 2 and ifAdminStaus = 1 during the same time frame. Problem ends as soon as IfOperStatus = 1, or ifAdminStatus = 2 (that means we shut down the port)
If the interface does not flap, the trigger works fine, but as soon as it starts flapping, it will alert me many times.
({TRIGGER.VALUE}=0&({MDF-Acceso2:ifOperStatus[GigabitEthernet2/0/33].max({$DETECT_INT_DOWN})}=2 &
{MDF-Acceso2:ifAdminStatus[GigabitEthernet2/0/33].max({$DETECT_INT_DOWN})}=1))
|
({TRIGGER.VALUE}=1&({MDF-Acceso2:ifOperStatus[GigabitEthernet2/0/33].min({$DETECT_INT_FLAP_THRESHOLD})}=2 &
{MDF-Acceso2:ifAdminStatus[GigabitEthernet2/0/33].max({$DETECT_INT_FLAP_THRESHOLD})}=1))
Can you spot where am I screwing this up?
Thanks a lot for your kind help