Ignore BGP alerting when node is down

I have a PE <> CE Scenario, i monitor BGP on the PE and it works fine.

What i am trying to achieve is:

- if CE is down, dont trigger the BGP alerting on the PE

Any given CE could have multiple BGP neighbours, for different VRF's. And if the CE goes down, we can react to the node down, there is no need to have the additional BGP alerts

Find more posts tagged with

node down

bgp alerting

Accepted answers

All comments

bobhope

SELECT Nodes.Status, Nodes.DisplayName FROM Orion.Nodes AS Nodes

-- Join the Routing Neighbors using Alias BGPneighbors to table Nodes using the NodeID
JOIN Orion.Routing.Neighbors AS [BGPneighbors] ON Nodes.NodeID = [BGPneighbors].NodeID

where protocolname='bgp' 
and Nodes.CustomProperties.Device_Role = 'CUSTOM_VALUE'
and BGPneighbors.ProtocolStatusDescription <> 'Established'

Above i can get all the BGP nieghbours that are down.

What i am also trying to achieve is being able to retrive the status of the neighbouring node, the node with the BGP IP address configured on it

jajao555

I don't think you'd be able to do that without being able to tie the neighbor IP to a node IP. Are these eBGP or iBGP peers? I was able to tie an interface to our eBGP peers using ARP tables with the query below maybe it will help depending on how you peers are setup?

SELECT TOP 1000 
--R.NodeID, 
--A.Node.CoreNodeID,
--R.Caption,
--R.Nodes.IP_Address AS Local_Lo0,
R.Neighbors.DisplayName AS BGP_Peer,
--A.InterfaceIndex,
--I.Index,
I.IfName AS Interface,
I.Alias AS Description,
V.VRF.DisplayName AS VRF,
--A.IPAddress,
R.Neighbors.AutonomousSystem,
R.Neighbors.ProtocolName,
R.Neighbors.ProtocolStatusDescription AS Status
FROM Orion.Routing.Router R

LEFT JOIN NCM.ArpTables A
    ON R.NodeID = A.Node.CoreNodeID AND R.Neighbors.NeighborIP = A.IPAddress

LEFT JOIN Orion.NPM.Interfaces I 
    ON R.NodeID = I.NodeID AND A.InterfaceIndex = I.Index

LEFT JOIN Orion.Routing.VRFInterface V 
    ON R.NodeID = V.NodeID AND A.InterfaceIndex = V.IfIndex

WHERE R.NodeID = ${NodeID}
ORDER BY R.Neighbors.DisplayName ASCENDING

This gives you a table like below

bobhope

Thanks for the reply. I can see what you are doing there.

A few points i failed to mention.

I am using SWQL Studio to get the syntax correct, with the final goal of creating an alert within Solarwinds, however, from my version of SolarWinds, i can only select pre-defined 'SELECT' optons, i.e.

SELECT Nodes.Uri, Nodes.DisplayName FROM Orion.Nodes AS Nodes

SELECT Neighbors.Uri, Neighbors.DisplayName FROM Orion.Routing.Neighbors AS Neighbors

There are loads more to choose from, however, i am unable to manually edit this field, perhaps i have just not found the option to ammend it?

I tried again with another attempt below, but of course that failed too

SELECT Nodes.Status, Nodes.DisplayName FROM Orion.Nodes AS Nodes

-- Join the Routing Neighbors using Alias BGPneighbors to table Nodes using the NodeID
JOIN Orion.Routing.Neighbors AS [BGPneighbors] ON Nodes.NodeID = [BGPneighbors].NodeID

-- Trying to access the Neighbouring nodes details 
-- Based on a Match from This Nodes BGP Neigbour ip 
-- Matching on an IP address configured on the Nieghbouring Node
-- But of course this does not work 
RIGHT JOIN Nodes AS NeighborNode ON BGPneighbors.NeighborIP = Nodes.IPAddress 

where protocolname='bgp' 
and Nodes.CustomProperties.Device_Role = 'CUSTOM_VALUE'
and BGPneighbors.ProtocolStatusDescription <> 'Established'

There is however, the option to add 'complex conditions' when creating an alerting on SolarWinds. Which allows me to make more than one call. So i can now have mutiple 'SELECTS' which i am still playing about with

bobhope

Think i got it, i was really just asking the wrong questions.

The mission was to ignore BGP from Nodes that were down

Or Another way to ask is

Show the Nodes that are up but BGP is down, and this can be acomplished with

SELECT Neighbors.Uri, Neighbors.DisplayName FROM Orion.Routing.Neighbors AS Neighbors

FULL JOIN orion.Nodes AS NNode on Neighbors.NeighborIP = NNode.IPAddress

where protocolname='bgp'

-- Node is up 
and NNode.Status = 1

-- BGP is Down 
and Neighbors.ProtocolStatusDescription <> 'Established'