Stuck while creating a customized report.

Hi, thinking that every time thresholds are breached, an event log is created. Can you count the event posts? That would be easiest I think

Hi Seashore 

For this, if I’m not mistaken, I need to adjust the threshold for each individual interface node according to the requirements. After that, I would need to create a report based on the events.

However, I believe there might be an easier way to accomplish this without manually adjusting each threshold. What are your thoughts?

WindsOfNishat 

If all of you wan interfaces has Wan in their name of some other way to search for them, they can all be changed at once in "manage nodes" page.

You can also count the nr of times in the database that you have a higher value than your threshold, but it it's high for some time you will get several hits even though it was one occasion. But a long one.

So, depends on your needs. 

Is the threshold percentage for all interfaces the same?   If so, go adjust the "NPM Settings" thresholds in settings.   You will find the "Interface Percent Utilization" where you can set "Critical" and "Warning" levels.   I'd set the warning level to the desired setting, then set up alerts to trigger when this warning level is met.

That being said, the resolution of the data might not be what you want.   ie: NPM only polls every 9 minutes or so by default, so you get a 9 minute average.   Let's say its a 1G circuit and your warning threshold is 80%.   If the circuit was at 100% for 3 minutes, and 50% for the rest, I think you're average would be around 70% so your warning would trigger an alert.   Two choices (at least) here, either lower the polling frequency so it polls more often.   This choice if utilized too much might cause issues with your poller getting too busy.   A second choice would be to go with something like NTA which uses Netflow to see the data.  Unlike SNMP which polls at a given interval, Netflow is pushed from the box, and you usually set it up to push this data every minute or less.  Then set up an Alert in NTA if it goes over the threshold.

Hi cnorborg 

That's why users are looking for a report that shows how many times in a day or hour the set thresholds are crossed by any circuit. Using this, they can analyze the utilization of specific circuits.

Changing thresholds or adjusting polling frequencies is not an issue. My concern is: what approach should I take to build the requested reports?

We have NPM and NTA.

Hi Seashore & cnorborg 

Changing thresholds, adjusting polling frequencies, or renaming is not an issue. After giving it considerable thought, I came up with an idea that might help me showcase a report that aligns with what the user is expecting.

I was thinking of adjusting the interface warning threshold based on the user’s requirements. Then, I would set up an alert based on these new changes and create a report that counts the alerts. I believe this approach could help me achieve what the user is asking for.

The user's main requirement is to know how many times a specific WAN threshold is reached within a day or an hour.

I’m sharing this thought with you to gather your valuable feedback on it.

Thank you for your understanding and kind response.