Re: [Devmon] if_err stats

[Mario V. <mar...@gm...>]

Hi,

Sorry to come back to this...

Can anyone see where I am going wrong with this?

I'm wanting to have an alert when there is a change in
interface errors in/out by more than x.  I think my files are
correct,  just that I'm still not alerted when errors occur.

----------------------------------------------------------------------------
*oids
*ifName          : .1.3.6.1.2.1.31.1.1.1.1       : branch
ifAlias         : .1.3.6.1.2.1.31.1.1.1.18      : branch
ifSpeed         : .1.3.6.1.2.1.2.2.1.5          : branch
ifInOctets      : .1.3.6.1.2.1.2.2.1.10         : branch
*ifInErrors      : .1.3.6.1.2.1.2.2.1.14         : branch
*ifOutOctets     : .1.3.6.1.2.1.2.2.1.16         : branch
*ifOutErrors     : .1.3.6.1.2.1.2.2.1.20         : branch*

*transforms*
# Get bit speed delta (so we dont have to provide custom delta limit)
ifInOps         : DELTA         : {ifInOctets}
ifOutOps        : DELTA         : {ifOutOctets}
# Convert our octets delta into bits per second
ifInBps         : MATH          : {ifInOps} x 8
ifOutBps        : MATH          : {ifOutOps} x 8
*# Do delta transform on all error counters
ifInEps         : DELTA         : {ifInErrors}
ifOutEps        : DELTA         : {ifOutErrors}
*# Perform error to traffic percentage calculations
ifInErrPct      : MATH          : ({ifInEps} / {ifInBps}) x 100
ifOutErrPct     : MATH          : ({ifOutEps} / {ifOutBps}) x 100
# Create an alias in a bracketed box, or nothing if alias is blank
ifAliasBox      : REGSUB        : {ifAlias} /(\S+.*)/ [$1]/


*thresholds
*# Create thresholds for all the error rate counters
# oid name      : color         : limit : Error message
ifInEps         : yellow        : >=1   : {ifName}{ifAliasBox} - High input
error rate ({ifInEps})
ifInEps         : red           : >=3   : {ifName}{ifAliasBox} - Very high
input error rate ({ifInEps})
ifOutEps        : yellow        : >=1   : {ifName}{ifAliasBox} - High
output error rate ({ifOutEps})
ifOutEps        : red           : >=3   : {ifName}{ifAliasBox} - Very high
output error rate ({ifOutEps})


*message
*Input Error RED Status if: {ifInEps.thresh:red}
Output Error RED Status if: {ifOutEps.thresh:red}
Input Error YELLOW Status if: {ifInEps.thresh:yellow}
Output Error YELLOW Status if: {ifOutEps.thresh:yellow}

TABLE:rrd(DS:ds0:ifInEps:COUNTER; DS:ds1:ifOutEps:COUNTER)
Ifc name|Errors incoming|Errors outgoing
{ifName}{ifAliasBox}|{ifInEps.color}{ifInEps.errors}|{ifOutEps.color}{ifOutEps.errors}



Thanks,


On 27 January 2012 13:20, Buchan Milne <bg...@st...> wrote:

> On Friday, 27 January 2012 11:28:35 Mario Valetti wrote:
> > I'm working on standard, unmodified templates.  In particular with 3750,
> > 4948 and 2801 devices.
> >
> >
> > Thanks for the advice on the 'multigraphs=disk,if_load,if_err,temp' to
> > CGI_SVC_OPTS in hobbitcgi.cfg or
> > equivalent'.  It's already a step forward.
> >
> >
> > Regarding the thresholds;  in my case, rather than wanting to check error
> > packets as a percentage of bandwidth, I want to be alerted if and when an
> > error is detected at all.  ¨Perhaps a threshold check with the  "*
> > {ifInErrors}"* and "*{ifOutErrors}" *will give me what I need.
> > I'll play around with it.
>
>
> I think you would want to put thresholds on ifInEps and ifOutEps instead?
>
>
> > > The transforms file on most of the if_err tests includes:
> > >
> > > # Get bit speed delta (so we dont have to provide custom delta limit)
> > > ifInOps         : DELTA         : {ifInOctets}
> > > ifOutOps        : DELTA         : {ifOutOctets}
> > > # Convert our octets delta into bits per second
> > > ifInBps         : MATH          : {ifInOps} x 8
> > > ifOutBps        : MATH          : {ifOutOps} x 8
> > > # Do delta transform on all error counters
> > > ifInEps         : DELTA         : {ifInErrors}
> > > ifOutEps        : DELTA         : {ifOutErrors}
> > > # Perform error to traffic percentage calculations
> > > ifInErrPct      : MATH          : ({ifInEps} / {ifInBps}) x 100
> > > ifOutErrPct     : MATH          : ({ifOutEps} / {ifOutBps}) x 100
> > > # Create an alias in a bracketed box, or nothing if alias is blank
> > > ifAliasBox      : REGSUB        : {ifAlias} /(\S+.*)/ [$1]/
> > >
> > > And the thresholds:
> > > # Create thresholds for all the error rate counters
> > > # oid name      : color         : limit : Error message
> > >
> > > ifInErrPct      : yellow        : 5     : {ifName}{ifAliasBox} - High
> > > input error rate ({ifInErrPct}%)
> > > ifInErrPct      : red           : 10    : {ifName}{ifAliasBox} - Very
> > > high input error rate ({ifInErrPct}%)
> > > ifOutErrPct     : yellow        : 5     : {ifName}{ifAliasBox} - High
> > > output
> > > error rate ({ifOutErrPct}%)
> > > ifOutErrPct     : red           : 10    : {ifName}{ifAliasBox} - Very
> > > high output error rate ({ifOutErrPct}%)
>
>
> Regards,
> Buchan
>