Report: list of interfaces with utilization 90% for x consecutive polls over last 24 hours

Question

Hi all! Newb here. I'm looking to create a report that lists only interfaces where their utilization has been > 90% for x consecutive polls or x minutes within the last 24 hours. Basically, I'm looking to avoid reports that simply show interfaces that have short spikes beyond 90% utilization, but instead a report that shows interfaces that have consistent periods of time with high utilization. Is this possible? If so, any tips or advice on how to create such a report would be greatly appreciated!

dharmbodh · Answer

@mesverrum

Thanks

mesverrum · Answer

This is an example of a report on durations of alerts

https://thwack.solarwinds.com/t5/Report-Lab-Discussions/In-need-of-a-report-that-shows-the-span-of-time-when-an-alert-is/m-p/331284

mesverrum · Answer

I've written SQL reports like this before, but it is computationally very expensive because at the time you run the report it has to find every timestamp that goes over the threshold and then start comparing them to the future timestamps.

The way I learned that was MUCH more efficient to just create an informational alert that triggers any time you have your x polls of duration,  Then you just write a much simpler report that shows all the times the alert fired and how long it was active.  In environments with more than a few thousands interfaces it changes it from something that takes 5-10 minutes to run into something that you can run in 5 seconds.