Slight Confusion

Question

ok, i am tring to setup a couple of alerts based on events that happened over the weekend.

Its similar to dependencies, but I am not sure how to make my alerts fire.

I have a router and 4 switches being monitored. On the router, one interface is a DS3.  I have alerts set for the Circuits themselves, as well as the hardware.  In theory, when the DS3 goes down, I should get 6 alerts - Circuit, Router, and 4 switches, right? (generic/simple alert).

What I am trying to do is setup alerts so that if the circuit goes down, I get alerts on the circuit, but the down stream stuff does not fire alerts.

I know we have talked about this in the forums before, but I am unclear on the way to do this because I cant tell a NODE alert to supress based on the status of a INTERFACE alert.

Any suggestions please?

qle · Answer

I understand. I thought that this was a WAN interface at a remote office that the poller used to reach the switches.

Anyway, to address your question, have you already created a group for the four switches and the router? If so, try creating a dependency for that group with the interface as the parent. That should accomplish what you're looking for.

dclick · Answer

sort of.. I have had trouble building a node dependency on an interface.

If my device (router) has 4 interfaces, and all 4 died, sure - then the router is down, and all downstream devices are down.  However, if just ONE interface goes down,  the router is still UP and reachable. However, when I build the alert, how do I tell Orion to ignore NODES if an INTERFACE is down?  Maybe I have not spent enough time working with dependencies.

qle · Answer

As far as the poller is concerned, not only is the interface down but the entire router is down. Assuming you've setup dependencies for the four switches with the router as the parent, you shouldn't receive any down alerts for those switches. I hope I've explained it clearly. If not, let me know.