[opennms-discuss] Threshold question

[Fuhrmann, M. <Mar...@lu...>]

Hello again,

I need to filter some windows-partitions, so that no thresholds will be triggered. I’m not sure which field I should use.

The eventlog shows:

Threshold exceeded for SNMP datasource hrStorageUsed / hrStorageSize * 100.0 on interface 10.4.1.36, parms: label="Z:\ Label:Swap Serial Number 64e0e04f" ds="hrStorageUsed / hrStorageSize * 100.0" value="96,09" instance="4" trigger="2" threshold="80.0" rearm="70.0"

I think, this should be the search string "Z:\ Label:Swap Serial Number 64e0e04f".
In notifications I can get this information with “parm[label]” and the threshold uses hrStorageDesc to get the drive letter. But both don’t work in my threshold.


Here my threshold:

<group name="hrstorage" rrdRepository="/var/lib/opennms/rrd/snmp/">
        <expression type="high" ds-type="hrStorageIndex" value="80.0"
            rearm="70.0" trigger="2" ds-label="hrStorageDescr"
            triggeredUEI="opennms.org/custom/windskabove80"
            rearmedUEI="opennms.org/custom/windskbelow80"
            filterOperator="or" expression="hrStorageUsed / hrStorageSize * 100.0">
            <resource-filter field="hrStorageType">^\.1\.3\.6\.1\.2\.1\.25\.2\.1\.4$</resource-filter>
            <resource-filter field="???">^Z\:\\ Label\:Swap Serial Number 64e0e04f$</resource-filter>
        </expression>
        <expression type="relativeChange" ds-type="hrStorageIndex"
            value="0.5" rearm="0.0" trigger="2"
            ds-label="hrStorageDescr" filterOperator="or" expression="hrStorageUsed / hrStorageSize * 100.0">
            <resource-filter field="hrStorageType">^\.1\.3\.6\.1\.2\.1\.25\.2\.1\.4$</resource-filter>
        </expression>
    </group>


Thanks for your help.

Greetings
Marcel Fuhrmann