Help Understanding Node Reboot vs Node down

jpak26

We have generator testing and notice we do not receive alerts for nodes going down but seem them polled as rebooted. I found this information on another thread and wondering if anyone can explain this a little better.

"For last boot we look for a lower sys uptime poll. If the sys uptime is always a larger number then the device did not recently reboot. If it returns a lower number than last poll it has been rebooted"

We're not understanding why a node that goes down for several minutes is being polled as rebooted instead of down.

TIA

adam.beedell

Down is a status, reboot is an event. (-Has Gone Down/come up is also an event sometimes)

Probably the combination of polling time + alert calculation time + smoothing time + Warning/Critical Status time (say if it responded to some pings over a cycle) > outage window. Increase those frequencies if you need a faster polled response time.

You can do event type stuff that's really quick, but does have it's own set of drawbacks.

If it's a vmware thing the status poll interval is hilariously long sometimes.