We are having an issue where Orion assumes the node is down when we are at only 40% utilization. We are trying to find a way for it to report heavy traffic, instead of complete node down.
Thank you.
Actually - here's what's happening. Our circuit gets saturated and latency goes up. MPLS starts discarding ICMP so "packet loss" exceeds 40%. Orion is then alerting "XYZ is down".We'd rather it alert the site as down when packet loss is greater than 75%. We only have a T1, and large email attachments can sometimes saturate the circuit for several minutes.It's too many false positives - and the alert isn't actually reflective of what's happening.Any suggestions?
Actually - here's what's happening. Our circuit gets saturated and latency goes up. MPLS starts discarding ICMP so "packet loss" exceeds 40%. Orion is then alerting "XYZ is down".
We'd rather it alert the site as down when packet loss is greater than 75%. We only have a T1, and large email attachments can sometimes saturate the circuit for several minutes.
It's too many false positives - and the alert isn't actually reflective of what's happening.
Any suggestions?
You can modify the conditions of the alert to any criteria that you want. My suggestion would be to modify the conditions of your alert(s) to be consistent with the functionality you want.
We are having an issue where Orion assumes the node is down when we are at only 40% utilization. We are trying to find a way for it to report heavy traffic, instead of complete node down. Thank you.
How is Orion indicating the node is down, through the WebUI or with an Alert? My guess is that you have something configured incorrectly.
Via an alert. Our system Node warning level is currently set to 180 seconds. ICMP Timeout is 2500ms and SNMP Timeout is 2500ms
Ok, the alert is likely not configured properly. Can you please post a screenshot of the alert trigger conditions and and indicate what exactly you want the alert to do, then I can try and help.
another thing, can you open a cmd prompt on NPM server and ping the node when it reports the node is down? can you paste in the results?
I'll post a screen shot in a few, thanks.
