Alert Suppression - Specific Port/Application

Question

I have an alert created for High XMIT utilization on serial and multilink interfaces, these alerts are working fine.

My question is, I have two remote sites that have file servers that are being backed up by Iron Mountain Live Vault.

Is it possible to suppress my XMIT utilization alert when the file servers are being backed up by Live Vault?  It looks like it is using Port 2144.

I am somewhat new to this, and have tried looking/digging and have not come up with anything.

Any help is appreciated.

Chris

mrxinu · Answer

Unfortunately the advanced alert manager doesn't have any structure for specifying time periods so this would be a good candidate for a 'Custom SQL' alert. If you take a screenshot of your working alert I can give you the query to do what you need.  The port number makes no difference, though.  NPM isn't looking any closer than the ifInOctets/ifOutOctets counters to tell you how much traffic is going over the link.  Knowing which two hosts to ignore for what time period would do the trick though.