Disable interface bandwidth check on Dell Switches when interface type is vlan?

[flakrat12]

Howdy,

Relative newbie to Zabbix. We are running Zabbix 7.0.8 and are currently monitoring a bunch of Dell switches (PowerSwitch S5232F-ON, Z9264F-ON, etc...) using the template Dell Force S-Series by SNMP.

I have been routinely getting spammed by our recent Zabbix deployment with "Interface vlan1234: High bandwidth usage (>90%)"

The issue, we have 25Gb, 100Gb and 400Gb interfaces using various VLANs on our switches and some digging reveals that the VLANs all have a speed of 10Gbps in Zabbix.

Further digging on the switches show that, the switches are, in fact, reporting the VLANs max speed at 10Gbps. Apparently, this is normal on switches with virtual interfaces.

# show interface vlan 100
Vlan 100 is up, line protocol is upInterface index is 52
MTU 9216 bytes, IP MTU 9184 bytes
LineSpeed 10G <<<---------

I may be trying to correct this the wrong way, but what I have tried is to test on a single host to modify the following macro:

• Macro: {$IF.UTIL.MAX}
• Value: 90

With the following, with the thought continue collecting bandwidth unless it contains the string vlan

• Macro: {$IF.UTIL.MAX:"^(?!vlan).*$"}
• Value: 90

As I write this, I think I see a problem, "$IF.UTIL.MAX" is only going to contain an integer (or maybe float). So the regex will never match what I intend.

Any thoughts on how I should address this? I'd perfer that I don't see any bandwidth for any interface with the name "vlan.*".

Thanks

[flakrat12]

Thanks for the tips ingus.vilnis and cyber. I believe I have a working solution using LLD (note this is in Zabbix 7.2, in the future things may get moved around):

In Zabbix GUI go to Data Collection -> Templates and search for the switch template, Dell Force S-Series by SNMP. Click Discovery followed by Network interfaces discovery

Click Overrides and Add to create a new override

• Name: Ignore IFALIAS VLAN speed
• If filter matches: Continue overrides
• Filters:
  • Label macro: {#IFNAME}
  • Condition: Matches
  • Regular Expression: ^vlan.*$
• Operations:
  • Object: Item prototype
  • Condition: contains : Speed
  • Create enabled: unchecked
  • Discover: No
  • The remaining items are unchecked

I temporarily set Update Interval to 5m (default was 1h) and after 5 minutes I now only see net.if.speed discovered for interfaces that are not VLANs.

[flakrat12]

Basically, I'id like it if none of my switches contained "Interface vlan1234(): Speed" in their latest data, don't record that data at all since it's completely irrelavant.

Thanks

[ingus.vilnis]

Hey,
In LLD rule configuration look for Filters section and add a filter where {#IFNAME} does not match "vlan.*"

Observe in the configuration list of items that they get marked with yellow icons on the right that the items are no longer discovered.

You can then rely on the LLD rule setting "Keep lost resources period" , set it temporarily to 0 or delete the items from hosts manually.

!! Be careful if this LLD rule is used on other type of devices where vlan interfaces are required to be monitored. Then you could override that filter on each individual host level.

[flakrat12]

Thanks, it looks like LLD is the way to go to completely remove interface "vlan" from discovery. Reading through https://www.zabbix.com/documentation...evel_discovery and watching this video https://www.youtube.com/watch?v=CkQSUCw40KI I think I've got the gist.

Ideally, I'd like continue discovery of the VLAN interfaces, however filter out the items that aren't important for VLAN interfaces (i.e. net.if.speed, net.if.out*, net.if.in*), leaving only net.if.type, net.if.status and name/description. Is this possible?

[cyber]

Overrides in discovery. Based on LLD macro value, you can do or not do different actions, like create items/triggers or not..

[flakrat12]

Thanks for the tips ingus.vilnis and cyber. I believe I have a working solution using LLD (note this is in Zabbix 7.2, in the future things may get moved around):

In Zabbix GUI go to Data Collection -> Templates and search for the switch template, Dell Force S-Series by SNMP. Click Discovery followed by Network interfaces discovery

Click Overrides and Add to create a new override

• Name: Ignore IFALIAS VLAN speed
• If filter matches: Continue overrides
• Filters:
  • Label macro: {#IFNAME}
  • Condition: Matches
  • Regular Expression: ^vlan.*$
• Operations:
  • Object: Item prototype
  • Condition: contains : Speed
  • Create enabled: unchecked
  • Discover: No
  • The remaining items are unchecked

I temporarily set Update Interval to 5m (default was 1h) and after 5 minutes I now only see net.if.speed discovered for interfaces that are not VLANs.