Alert for when a node goes down X amount of times in a given time frame.

Question

Right now, we have up/down alerting for our store's firewalls - when the FW is in a down state for 5 minutes, send an alert.

Some of our stores are in pretty remote locations with spotty internet. Is it possible to trigger an alert when the FW goes down 3 times within a 60 minute time frame? I'm afraid this might not be possible with how NPM polls a devices status.

rmullal · Answer

This helps. thank you.

mesverrum · Answer

Would have to do it in SQL, but yes it can be done.  I'd probably do something like search the events table for a count of node down events where timestamp > dateadd(mm,-60,getutcdate()) for each node having count(events) > 3 .  I don't have time to whip the actual SQL up right now but hopefully that gives you a place to start looking.