bcooper

i have an alert going out when an interface is at 80% utilization for 20min. Would it be easier to make a report that just shows each time that event was triggered?

so for example this is the config... username test1 privilege 15 blahblahblah username test2 privilege 15 blahblahblah username test3 privilege 15 blahblahblah username test4 privilege 15 blahblahblah username unknown privilege 15 blahblahblah I want to be alerted if any usernames exist in the config other that test1,…

but what should the "must not contain" expression look like?

any idea how i could limit the results to only display the interface 1 time with it's highest % utilization (above 80%) instead of listing each time it went above 80%? As is an offending interface is listed 50+ times which makes the report hard to read.

I fixed this issue by unchecking the "group historical data by day" box on the general tab. 

all other reports seem to be working. for the new report I get the headers of the report but below that I get "No activity to report"

so when i do that it alerts a violation even when it only finds one of the named users.

That gives me something but i'm not sure what. The number the chart shows doesn't come close to the temp shown on the node page (for Celsius or Fahrenheit)

This looks like a perfect complement to the report gunner2510 suggested above. I can use the report for weekly review and your alerts to be proactive on real time issues. I will work on the alert now but may have some questions for you as I set it up

Thanks gunner2510 for your help! I added the report and modified it a bit for testing (lowered the utilization % and set the filter to filter on machine type contains Cisco) When i preview the report in Orion Report Writer I see exactly what i need but when i run the report from our orion web interface I get no results.…

that makes since but i must be missing something because it still didn't work. here is what i have...

for example my rule currently checks that a chunk of config contains the following regular expression test1|test2|test3 so lets say this is the chuck it is looking in... username test1 privilege 15 blahblahblah username test2 privilege 15 blahblahblah username test3 privilege 15 blahblahblah username test4 privilege 15…

I'm having the same issue. Did you ever find a solution to this?

Did you ever find a solution to this? I am in need of the EXACT same report but filtered to only our ASAs.

I finally got it to work. I used alert if string is found and configured the regex like so... username (?!(test1|test2|test3)).* privilege 15 that way it only finds strings that are username XYZ privilege 15 (where XYZ is not test1-3) Thanks to all who gave me input. I couldn't have done it without you