Alert for Route Table Changes

ehsant

I need to get alert if the next hop is changed for a specific destination network that we need to monitor.

We need to make sure a specific interface with higher priority is in use.

Can you guys help me how to set up an alert as I couldn't find any way to leverage routing table info for alerts?

Find more posts tagged with

Alert

routing table

change

Accepted answers

All comments

KMSigma.SWI

There are a lot of variables at play here. Any chance you can give a "this is ok" example and a "this needs an alert" example? [Routing Protocol, IP Address Schemes, Priority Numbers, AS Numbers, anything else I might be missing]

ehsant

Thanks for responding.

Here is an example of what whe need:

If WAN1 does exist and up and the route interface for 192.168.0.0 is WAN1 it's OK.

If WAN1 does exist and up and the route interface for 192.168.0.0 is not WAN1 Send Alert.

I wrote this query based on my knowledge and understanding but it looks like my query only works in custom query widgets.

I can't use nested queries in alert conditions.

SELECT [Nodes].NodeID
     , [Nodes].DisplayName
     , [Nodes].IP
     , [Nodes].Status
     , [Nodes].Interfaces.InterfaceCaption
     , [Nodes].Interfaces.Status AS [InterfaceStatus]
     , [Nodes].Interfaces.Index AS [InterfaceIndex]
     , [Routes].RouteIfIndex

FROM Orion.NodeL3RoutingData AS [Routes], Orion.Nodes AS [Nodes]

WHERE [Routes].NodeID = [Nodes].NodeID AND [Routes].RouteType = 4 AND [Routes].RouteDestination = '192.168.1.0'
   AND [Nodes].Interfaces.InterfaceCaption LIKE 'WAN1' AND [Nodes].Interfaces.Status = 1
  AND [Routes].RouteIfIndex != [Nodes].Interfaces.Index