Alert Management with averages as the values

darlonjeel

I am looking for some guidance, on how to do some alerting based off of averages.  Here is my issue:

We have a set of Cisco devices, and we are using the standard hardware sensors to see temperature.  I want to get an alert if the temperature goes +10 degrees over the average.  I was looking through the Manage Alerts, but I am not seeing an easy way to do average +10 or something like that.

I can do a value threshold, say 50, but I really want to only alert when it is over the average by a certain number.

Since it is hardware sensor, I wasn't sure if there was a way with it or not.  I would think Alert Management would give some options related to this, without having to dive into the SWQL / SQL.

I am on the latest NPM 12.1.

Thanks in advance.

rharland2012

You're right - short of diving in deep on the backend, there doesn't seem to be a good way to do that.

If you've been monitoring these devices for awhile, however, you do have some baseline measurements for what 'normal' is. Perhaps you could simply modify the specific hardware sensor's thresholds to trigger on 'normal avg + x (where x is approximately 10% of the norm reading)' for warning and 'normal avg + y (where y is approx. 15% of said reading)' for critical.

If you've already investigated this and found it insufficient, then forgive the duplicate info.

If you DO find out how to alert on 'avg + 10%' on these sensors natively, please share post-success - I'm sure others would like to have a ready way to do this.

Good luck!