I could find wireless access point down alerts are received in delay which takes more than 5 - 10 mins. I have reduced the threshold from 10 to 5 mins as well. Can anyone suggest why the alert triggered in delay?
How are you monitoring Wireless Access Points ? Is it that you monitor the Wireless Controller and from the Wireless Controller you look for status of Access Point ? And when you mentioned reduced threshold from 10 to 5 did you mean polling interval on Wireless Controller ? If yes that is just one part of it.
Check the alert configuration as well, validate if the alert that is sending Wireless Access Point Down has any wait period in it.
Yes, it is Wireless controller. This is the alert configuration.
Yup that's the reason for the delay in alert - Now I am assuming you are polling Wireless Controller node once in 5 mins plus this wait which is why an alert is generated somewhere after 6 to 10 mins, now in the previous tab of your alert check how frequently is the alert being checked is it 1 min or 2 mins or something else ?
Frequency of the alert is 1min.
Ok perfect - in simple terms there is a chance that polling time and alerting engine time might not be in sync - don't get into the specifics as to why is it so. The only way to trigger an alert without any delay is by reducing 'condition must exist for more than' if that is what you want. But since you have mentioned you reduced it from 10 to 5 it seems pretty ok to me, just check with your operations team. For now you have a 5 min wait period which is good enough as it will wait for at least 2 polls if not you might see an increase in alert count. Hope this helps.
The time-to-receipt formula will be something like:~
Poll time (max being the frequency, else half for average) + Alert Evaluation Time (max being the frequency, else half for average, usually 1min) + Condition Must Exist time + Delivery time
Assuming no Group stuff, the device knowing immediately, and no escalation layer waitsChuck the object/s into perfstack to see if there's a difference unexpected between alert time and status change
I'm guessing your WAP isnt being polled every minute
WLC gets polled every 10m assuming default intervals.
Checks out given the time range stated by OP
Your memory is incredible!
