Good morning everyone,
Currently, I have a Serial interface alert that does't trigger unless the issues exists for more than 10 minutes.
Is there a way to alert me if the same serial interface "bounces" multiple times within that 10 minutes?
Thanks
Yes, there is. I found this somewhere on Thwack long ago, so can't take credit for it but it works great. You'd need to modify based on your needs but this is designed to watch Events and alert me if a WAN router stops responding 3 times in a 4 hour period. You would need to create a Custom SQL Alert and paste your modified query there.
INNER JOIN Events ON Nodes.NodeID = Events.NetObjectID
where eventtime >dateadd(hour,-4,getdate()) AND Message like '%stopped responding%' AND Nodes.Caption like '%WAN%' AND Nodes.CustomerName like '%ACME%' AND (Nodes.SeverityLevel=1 OR Nodes.SeverityLevel=2)
group by NodeID, Caption, EventType
having count(*)>=3
Thank you so much.
I will try this early next week.