Hi All,
Can you one please let me know if already setup for alerting on interface packet drop in NPM
There's an out-of-the-box alert for high packet loss.
@KMSigma.SWI Thank for the share the out-of-the-box alert, this will work for Node level not on interface. I am looking for alerting on interface packet loss. Node level already we have enabled but we are looking interface level. kindly suggest if any other option to enable for interface packet drop
Packet loss isn't something that the interface "knows" about. Packet loss is endpoint-to-endpoint.
An interface does know about errors and discards. There's not an out-of-the-box alert for that because not all interfaces are treated equally. For example, if you have an interface with a QoS policy attached, it's supposed to throw away packets as it prioritizes traffic.
But you can build one (just be sure to add whatever filtering you need)
The above trigger condition would only flip if the Errors/Discards were at the Warning Level (Warning = 'Yes', Critical = 'No') on either Inbound or outbound.
Like I said before, you really need to look at the logic here because some interfaces are just lossy. Be sure to double-check the list of interfaces where this would trigger before you hit "Submit."
In addition to the knowledge bomb @KMSigma.SWI just dropped, you may want to consider alerting on something like [errors+discards as a percentage of speed] for example. Doesnt have to be that specifically, but the idea being that you want to set a threshold that scales for different device types and any number in a vacuum is not necessarily bad.
This is why I like using the Crtical/Warning flags. Those thresholds are each set independent on each interface, so it can be tuned without touching the alert.
@KMSigma.SWI and @adam.beedell Thanks you very much for providing the solution. , i will implement same logic in our env and reach out you if any thing requires on this
Perhaps as a percentage of total packets as opposed to speed, @adam.beedell ?
@KMSigma.SWI Yes, this is what I was thinking but not what I typed
Chair-to-keyboard-interface-failure
I know it well.
You would need to set up your own custom pollers using ifInDiscards (.1.3.6.1.2.1.2.2.1.13) and ifOutDiscards (.1.3.6.1.2.1.2.2.1.19) If it's a few interfaces it may be ok to do, but if it's a lot I would script it via command line and do a compare each time the script runs. Here are the OID's if you need them Consider SNMP Counters: Frequently Asked Questions - Cisco
