Alerting for switch port traffic drop using interface description
I’m trying to manufacture a health check for a security camera system that doesn’t offer any internal checks. The cameras can fail but still respond to ping and other basic checks, so my thought is to look at the switches and use the port descriptions (which we manually maintain) and create a alert for only those ports if traffic falls below a threshold indicating there is no stream to the NVR.
All of the ports connected to cameras have ‘SecCam’ followed by location info in the description which I can see under the Switch / Network Interfaces for:
system.instanceDescription
auto.interface.alias
auto.interface.description
How would I go about setting up monitoring in a central way? Currently we’re manually creating an Instance group and putting interfaces in it per switch but that’s still dozens or possibly hundreds of different places to manage alert tuning / SDT.
Mark Lemm
·3 years agoI would clone the existing Interface DataSource, have it only apply to those specific switches and setup ActiveDiscovery filters so only interfaces with the description you want are discovered.
Additional information on filtering discovered instances:
What Is Active Discovery?
Luke_Parish1
OP3 years agoI think I might actually just take a page from
https://community.logicmonitor.com/product-discussions-22/creating-a-complex-data-source-to-check-the-interface-description-and-then-the-state-of-an-interface-to-generate-an-alert-2872and adjust the existing datasource and add a custom data point to include in a top level alert. Now to figure out how to go about mangling that process.
mnagel
·3 years agoInstance groups are not actually groups and nothing in LM cares about them other than for narrow display purposes and kinda for bulk application of thresholds (for instances currently tagged with the instance group name). Hopefully that changes, but I’ve been battling that one for many years without success. You ought to be able to use the API to set per-instance thresholds based on the descriptions.
Mike Moniz
·3 years agoI would clone the existing Interface DataSource, have it only apply to those specific switches and setup ActiveDiscovery filters so only interfaces with the description you want are discovered.