Need help with alerting from UnDP table data

I am trying to define some alerts based off of data polled from a table. This is what I think will work, however it is not working. I have a number of UnDPs defined to pull tablular data, such as the table of power supply state values from a Cisco 6500. I would like to alert based on this data, but can't figure out a good way to do it.

Find more posts tagged with

advanced_alert

Alert

UnDP

Accepted answers

All comments

Yann

Hi,

I suppose the Reset condition has been let to its default setting.

"Reset when trigger conditions are no longer true".

If this is the case then you alert will never work as expected except if both Power Supplies go down at the same time and come back up at the same time too.

Scenario 1:

RowID result returns 1 but RowID returns something else than 2.

=> Alert is triggered.

RESET Condition check:

"RowID is not equal to 1" condition is False and "RowID is not equal to 2" is True.

=> Alert is Reset.

Result: Alert has been triggered and reset faster than a speeding bullet.

If you wish to use advanced alert, you should configure only one RowID to be analyzed by the conditions or it is likely that you will face the above issue if you want to do more in a single alert.

If you do not specify a RowID you will face the issue too.

This remain true if you use the ANY boolean operator in the second group condition. If you configure it to ALL, this should not happen but limit the scenarios.

I hope this makes sense. Feel free to ask if you have any questions.

Yann

r0berth1

you need to add the Custom Poller Rate and set it to a equal to or greater than a value that you want. I will work on getting some screenshots posted later today.

jeremiahmcclain

The reset condition is a copy from the trigger but field status is set to equal in both conditions. However, I think I see your point. So I should set the trigger for the group conditions to any and the reset to all?

jeremiahmcclain

This raises another question, the UnDP is set to raw value, neither rate nor status, does this make a difference in the alert. There is no "field raw value" available in the alert.

r0berth1

OK, first, what exactly are you trying to alert on? The state of the power supply? Do you want it to alert when 1 or both go down and reset when the come back up? What other info do you want in there? You will probably need node name and power supply status. What type of equipment are you trying to monitor? Cisco Routers and Switches or servers?

jeremiahmcclain

In this case, we are monitoring ciscoEnvMonSupply state with a UnDP. We are getting the table and the value type is a raw value. The device I testing against is a Cisco 6509. I would like to have the alert query each row in the table against a custom property which is set to the expected value. For testing purposes, I change the custom property to a value other than 1 and re-enable the alert. I realize that my reset condition is wrong, as I would like to have it fire when either of the power supply states change from the expected value, but reset when all of the values are the expected value.

This is the basic strategy I would like to use for all of our alerting, since most of the UnDPs are polling tabular MIB data.