Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Alert based on a few different interface descriptions for uplinks

I am looking to create an alert for our uplink ports based on our interface captions, not all of our uplink interface descriptions are common is the issue i am having.

The following is what i got so far, the interface speed line is to filter out the wan interfaces which is handled by a different alert

I put together this as a second pass my first pass was... not so good (quite similar to Homer Simpsons everything is OK alarm) i got about 20k interface up alerts emails.

1-28-2014 2-50-13 PM.jpg

Find more posts tagged with

Accepted answers

All comments

zkahl

Hello,

I think you should move the Speed setting to the top under ALL branch. The way it sits it picks up any monitored interface that has a speed over 10000000.

Then the alert Interface would need to be down, higher speed, and match any caption string listed.

Zak

kalkenneth

Thanks for the reply. i will try it out hopefully it doesn't spam my mailbox full again

stuartwhyte

There is a simpler way to achieve what you are looking for, however will require a little up front work.

Create a true/false custom property for interfaces called "uplink" and set this to true for all your uplink ports. Your alert criteria then becomes:

Uplink = true

Interface <> Up

I have used "<> up" rather than "= down" as this will pick up on other interface conditions (unreachable and unknown for example) that may be of interest to you.

If it were me, I'd also add

Interface <> unmanaged

as unmanaging an interface would in effect silence the alert on that interface.

hope this helps

Stuart