Alerting on multiple Tunnel interfaces

Want one alert to trigger when ONLY multiple tunnels drop. I will be testing with AND logic tracking both interface names but really don't think it will work. Maybe possible with Interface Groups, but in my environment wouldn't be possible with size and alerting.

Example

Router A

Tunnel 10

Tunnel 20

Alert only on Router A when ALL tunnels 10 20 30 go down.

Has someone done this with SQL?

Zak

Find more posts tagged with

interface alert

npm alerts

gre_tunnel

Accepted answers

All comments

christopher.t.jones123

@zkahl, How are you monitoring your tunnels? is it through Network Insight for ASA or as Interfaces on the node? this distinction will drive the query that could be built to accomplish this

zkahl

HI Chris,

These are GRE on routers, so interfaces on Node. I see ASA and Palo Altos have other solutions.

christopher.t.jones123

@zkahl, let me try and hobble something together I would think work. I'll post something when I think I have it worked out.

zkahl

Awesome, thanks.

zkahl

I thought of an easy fix, but need to test. Have different trigger times on tunnels, ex 5,10,15 min. When one triggers it checks a CP on Node, and if not set then trigger and set CP so others don't trigger. Then afterwards clear CP after reset.