If I want to create an alert for a node in a 'down' status, which method should I use? ...and why?
Assume I'm checking the alert every 1 min and I have 10,000 nodes.
Method 1:
Method 2:
I use the second method and it is pretty effective for me so far although I have around 1K nodes
Second method is better I feel. If you have custom properties to be used then even that can be clubbed very easily...
Second method, with custom fields. I'd suggest a "node status not equal to up", instead of one that is down. Then you'll get alerts on warnings, unknown, etc.
Some custom fields we use:
So, my network alerts will be: node status is equal network, and priority is equal < 2 and, node status is not equal to up.
You'll get a lot of noise with a trigger condition of NOT up.
I prefer to use method 2 because its more explicit and seems more logical to me.
I would agree with everyone here an say the second method is what I would go with. It seems like the first method would require Orion to check the database for current and previous status vs. just the current status of the node. Just seems cleaner and less strain on the DB.
Thanks for the feedback, all.