Ad Widget

Collapse

Help needed with triggers based on change in traffic utilization of network interface

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • ikrneta
    Junior Member
    • Jun 2022
    • 2

    #1

    Help needed with triggers based on change in traffic utilization of network interface

    Hello Team,

    I have recently started using Zabbix for some network device monitoring and alerting with the intention of using it to replace outdated Cacti installation.
    One thing that I am struggling to make sense of is how to create a trigger on network interface utilization changes ?

    Essentially, what I want to do is something like "if traffic over specific network interface (Rx or Tx) during last 5 minutes is less then half of average of traffic over that same interface 15 minutes ago, trigger an alert".

    My lame attempt on trigger expression looks like this:

    Code:
    avg(/Interfaces SNMP High preference/net.if.in[ifHCInOctets.{#SNMPINDEX}],5m) < (avg(/Interfaces SNMP High preference/net.if.in[ifHCInOctets.{#SNMPINDEX}],15m)*0.5)
    or
    avg(/Interfaces SNMP High preference/net.if.out[ifHCOutOctets.{#SNMPINDEX}],5m) < (avg(/Interfaces SNMP High preference/net.if.out[ifHCOutOctets.{#SNMPINDEX}],15m)*0.5)
    But could not get it to work. Trigger is created, but it starts to alert on all possible traffic fluctuations...


    I have tried to search for solution both here and on Google, but failed to find any example of working setup....

    Can anyone help with getting the syntax correct here ?
  • Markku
    Senior Member
    Zabbix Certified SpecialistZabbix Certified ProfessionalZabbix Certified Expert
    • Sep 2018
    • 1781

    #2
    Sounds like you are looking for a time shift (https://www.zabbix.com/documentation...ion#time-shift): 5m:now-15m (instead of "15m")

    Markku

    Comment

    Working...