How to alert on interface that has an "unknown" IP address

Question

In our environment, if one of the ports on our SD-WAN device has an "unknown" IP address, the modem is not issuing an IP address so I would like to alert off this. However, I cannot find the field in the alert wizard for that specific interface.

Can someone point me in the right direction? thank you!

rmullal · Answer

@jrouviere thank you for your reply. i just wanted to make sure i wasn't crazy and that field wasn't in the graphical builder. i think that's really odd.

a custom query it is...thank you!

jrouviere · Answer

I didn't see a way to access the field from the graphical builder, but you can make a mapping with a SWQL query for a custom alert if you're familiar with those.

You'll need the where clause to be something like:

You'll almost certainly want to limit the device type or naming convention or the interface type/naming convention specifically as depending on your set up, most interfaces do not have associated IP Addresses.