Hi,
I wanted to create an alert for the last 24 hour errors.
Only thing i found is the InErrorsToday field:
But this counts errors from midnight.
I have an issue with this field since the "errors Today", and "Error last hour" drops to 0 at 12 AM.
Additionally the traffic drops to 0 at night so also the error rate drops.
Causing the alert to reset at midnight and trigger a few hours later.
We create tickets based on the triggering of this alert. But we dont want our ticketing system to be spammed each day at midnight for a thing that is a continous issue.
So i see 3 options:
But i have no idea how to make them work:
1. InErrorslast24hour field which that is not in the interface fields.
This would be the best solution where we would monitor the 24 hour error rate and if the problem is continous the alarm would always be active.
2. Combine 2 reset conditions:
If the trigger condition is no longer there for 8 hours.
3. Custom query on the DB that calculates the SUM of errors for an interface for last 24hours. And base an alert on this.
Jacek
