Hello everybody!
I'm new to Zabbix, but I'm quite surprised to how it can be powerful and useful!
I'm building a configuration to my customer and I have a little issue that I want to mitigate.
I'm monitoring my switches with the HPe switch SNMP template. Everything works great!
I noticed that many times, I suppose when the clients shutdown, it will trigger the "Interface in half duplex mode" event, but it's a false positive because at the same time, I also get the "Link Down" event.
I don't want to disable the client port monitoring, because I want to active track traffic volume, errors, and so on.
So, I want to create an event correlation (or something else) that wipes out the "Half Duplex" alarm when it comes simultaneously with a "Link Down" event.
I tried to edit the parent trigger prototype "Interface {#IFNAME}({#IFALIAS}): In half-duplex mode" in order to insert a recovery expression, but when I try to update it I'll get the error "Cannot update trigger prototype" saying that "Trigger prototype "Interface {#IFNAME}({#IFALIAS}): In half-duplex mode" contains item prototypes from multiple discovery rules.".
I already saw that in the related "Discovery Rule" there is a filter that teaches the rule to watch only for the "UP" interfaces, but it seems that it's not sufficent to filter out those false positives.
Thanx a lot in advance to anyone that want to help me!
Bye!
---
Metalgalle
I'm new to Zabbix, but I'm quite surprised to how it can be powerful and useful!
I'm building a configuration to my customer and I have a little issue that I want to mitigate.
I'm monitoring my switches with the HPe switch SNMP template. Everything works great!
I noticed that many times, I suppose when the clients shutdown, it will trigger the "Interface in half duplex mode" event, but it's a false positive because at the same time, I also get the "Link Down" event.
I don't want to disable the client port monitoring, because I want to active track traffic volume, errors, and so on.
So, I want to create an event correlation (or something else) that wipes out the "Half Duplex" alarm when it comes simultaneously with a "Link Down" event.
I tried to edit the parent trigger prototype "Interface {#IFNAME}({#IFALIAS}): In half-duplex mode" in order to insert a recovery expression, but when I try to update it I'll get the error "Cannot update trigger prototype" saying that "Trigger prototype "Interface {#IFNAME}({#IFALIAS}): In half-duplex mode" contains item prototypes from multiple discovery rules.".
I already saw that in the related "Discovery Rule" there is a filter that teaches the rule to watch only for the "UP" interfaces, but it seems that it's not sufficent to filter out those false positives.
Thanx a lot in advance to anyone that want to help me!
Bye!
---
Metalgalle
Comment