alert for when x number of tun interfaces on a node go down

Hi All-

The nodes in question all have 4+ tunnels running to each remote site. I need two levels of alerting: when any tun* interface goes down (or really, any interface), send out a "heightened awareness" alert. That part is of course done.

However, the "oh *** everyone get out of bed" alert only needs to go out when a single tunnel remains to a site (or no tunnels to a site are up). Any clues as to how to make this work? It appears I can do it with a fairly complex (well, not complex, but looong) logical expression in the advanced alerts, but I'm hoping for something shorter/smarter...

Thanks-

Ryan

Find more posts tagged with

advanced_alerts

Alert

tunnel

Accepted answers

All comments

Yann

Hi,

The Adv Alert wizard does not let you set a count condition...so this seems like a feature request.

Alternatively the following post might help you:

Thanks,

Yann

rgoldberg

Yeah, I had looked around the posts little bit and that was the only thing I found suggesting I'd be able to do what I want.

Simple queries that do what I want are easy, but would require one advanced alert per tunnel group I want to monitor. I think my only way to make things more generic is to have strict interface naming schemes. But, I'm no sql wizard, maybe I'm missing something.

Ryan