Say there is an SDWAN router interface A and Interface B (both connected to Inet)
- I want to be notified when both of them reach the same Transmit or Receive threshold utilization together?
Say there is an SDWAN router interface A and Interface B (both connected to Inet)
- I want to be notified when both of them reach the same Transmit or Receive threshold utilization together?
are you saying you want to know if they are equal, or only when both are above a threshold at the same time?
e.g.;
Alert me when Interface A XMT = Interface B XMT
vs
Alert me when XMT or RCV critical threshold is breached for BOTH Interface A and B for XX minutes
I'm assuming the 2nd option, which austinzak put you on the right path towards.
The trick is to combine your conditions with a nested "AND" statement.
you can validate your logic by clicking the small "down" arrow on the right of your top-level "AND" (where the big red arrow is pointing in the image), and selecting "Show SWQL"
This brings up the SWQL behind the scenes that will be used to evaluate your alert condition:
SELECT E0.[Uri], E0.[DisplayName]
FROM Orion.NPM.Interfaces AS E0
WHERE
(
( E0.[Caption] = 'Interface A' )
AND
( E0.[OutPercentUtilizationThreshold].[IsLevel2State] = 'True' )
AND
(
( E0.[Caption] = 'Interface B' )
AND
( E0.[OutPercentUtilizationThreshold].[IsLevel2State] = 'True' )
)
)
This is an example for the Critical Threshold on the Transmit side, you would do the same thing for Receive, just flip the appropriate value in the drop down on your 2nd alert.
Note that you could combine these into a single alert with a top-level "OR", but honestly it's almost always a better idea to keep your alert logic as simple as possible.
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 195,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.