Need explanation for use of Trigger event data

[just2blue4u]

Hi There!

When i click on "last change" in any trigger's row in the trigger list, i come to page "./zabbix/tr_events.php<triggerid>" called "alarms", which shows me this list:

Time	Status	Acknowledged	Duration	Sum	%

The first 5 Cols are self-explaining, but i can only guess the real meaning of Sum and %!

Can someone please tell me the correct definition of what that last 2 Columns show?

[just2blue4u]

mmh... come on, there MUST be someone who can help me here...

[flunschi]

Hi just2blue4u,

It seems that the two colums are calculated as follows:

In column "sum" the sum of durations with the same status from the first to the current row is displayed. In other words: From "Time" to now the status of the trigger was "status" for "sum" time in total.

"%" shows 100% * "sum" / (now - "Time"), i. e., the percentage of time where status of trigger was "status" from "Time" until now. (Hence, "%" in the first row is always 100%.)

[just2blue4u]

Hi!

I thank you very much for that good explanation.

Using your definitions, this resulting statements should be true:
- If a the ratio of a trigger's true and false duration time is always the same, the sum and % values have that ratio, too.
e.g. a trigger that becomes true everyday for 1 hour will have a sum of 23h for false and 1h for true on the first day, 46h false and 2h true on the second and 69h false and 3h true on the third day.
- Adding the "sum" values for the true and false states from one day gives the total time of the trigger being active.
e.g. the trigger from above should have 23 days false and 1 day true after 24 days (96% false, 4% true).

Is that correctly interpreted?

[flunschi]

- If a the ratio of a trigger's true and false duration time is always the same, the sum and % values have that ratio, too.
e.g. a trigger that becomes true everyday for 1 hour will have a sum of 23h for false and 1h for true on the first day, 46h false and 2h true on the second and 69h false and 3h true on the third day.

Roughly, this is true. When being fussy we get the following.

Assume the trigger has status true from 00:00 to 01:00 each day and has status false otherwise. Furthermore, assume current time is 12:00. You will get:

Time;Status;Duration;Sum;%
day 0 01:00;FALSE;11 hours;11 hours;100%
day 0 00:00;TRUE;1 hours;1 hours;(100*1/(1+11))%=8.33%
day-1 01:00;FALSE;23 hours;11+23=34 hours;(100*(34/(34+1))%=97.14%
day-1 00:00;TRUE;1 hours;1+1=2 hours;(100*2/(2+34))%=5,56%
day-2 01:00;FALSE;23 hours;34+23=57 hours;(100*(57/(57+2))%=96.61%
day-2 00:00;TRUE;1 hours;2+1=3 hours;(100*3/(3+57))%=5%
and so on.
The ratio for status TRUE will approximate to 1/24 = 4.17% and to 23/24 = 95.83% for status FALSE.

- Adding the "sum" values for the true and false states from one day gives the total time of the trigger being active.
e.g. the trigger from above should have 23 days false and 1 day true after 24 days (96% false, 4% true).

You have to sum all "duration" or (if you do not have status unknown at all) two consecutive values of "sum" (one with status true and one with status false).

[just2blue4u]

thanks again!

I find this thing very confusing but i think i got it now!
Did i get it right, that the different values in your fuzzy explanation are because of the missing 12h for the rest of the first day?

Here's the output from the last two lines:

Time			Status	Ack.	Duration	Sum		%
2007.Nov.14 14:00:07	TRUE 	-	60 secs		6.1 days	2.74%
2007.Nov.14 10:23:07	FALSE 	-	3.6 hours	213.8 days	96.2%

ignoring the fey unsupported lines and adding both sum-values makes roughly 7 months!


thx,heiner

[flunschi]

Hi,

Did i get it right, that the different values in your fuzzy explanation are because of the missing 12h for the rest of the first day?

Yes and no

When having a look at 24:00 (just before the status switches from FALSE to TRUE) all ratios in rows with status TRUE will be 4.17%. But, the ratios in rows with status FALSE will differ from row to row. This is because the following is valid for these rows: The number of periods with status FALSE is 1 plus the number of periods with status TRUE. (It will be vice versa if current time is at the end of a period with status TRUE.)

But, I think it is just of academical interest.

[just2blue4u]

yes, i belive it's already a bit too deep.

I'm happy with this Information. Thanks alot!