Hi Matt,
Currently you can do this by saving the old values in different variables.
The evaluation of calculations in a probe proceeds from top to bottom (with
the exeption that OID variables are executed at the very beginning).
The variable values from the last evaluation are still available in the
current evaluation (as long as the variables haven't been assigned new
values).
An example for custom SNMP probe with N=3 is below.
<snmp-device-variables>
Prev3OctetIn, $Prev2OctetIn, CALCULATION, "InOctets from 3 polls before"
Prev2OctetIn, $Prev1OctetIn, CALCULATION, "InOctets from 2 polls before"
Prev1OctetIn, $CurrentOctetIn, CALCULATION, "InOctets from previous poll"
OctetIn, 1.3.6.1.2.1.2.2.1.10.2, INTEGER, "InOctets"
<!-- need to cache $OctetIn to be able to access its value in the
next iteration. -->
CurrentOctetIn, $OctetIn, CALCULATION, "Cache current InOctets"
</snmp-device-variables>
Thanks,
Ruth Kurniawati
Dartware, LLC
-----Original Message-----
From: [email protected]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt Stevens
Sent: Tuesday, January 25, 2005 5:41 PM
To: [email protected]
Subject: [IM-Talk] Alerts based on change
I have a question that may turn into a feature request.
I'd like to generate some sort of an alarm when a given probe variable
changes more than X in N polls.
Ie. I have a link that's transmitting 1000 packets-per-second. I'd like
to get an alarm if it jumps 3000 packets-per-second in one polling
period. Yet, it's totally normal for this link to do 4kpps - so I can't
just set a threshold at 4kpps.
I can't see a way to do this currently. It seems that if you had access
to the previous N values of a variable you could then do calculations
based on them. If N was one I'd be happy enough - if it was configurable
(or just larger) I'd be even more happy.
Does anybody have other ideas or solutions?
--
matt
____________________________________________________________________
List archives:
http://www.mail-archive.com/intermapper-talk%40list.dartware.com/
To unsubscribe: send email to: [EMAIL PROTECTED]
____________________________________________________________________
List archives:
http://www.mail-archive.com/intermapper-talk%40list.dartware.com/
To unsubscribe: send email to: [EMAIL PROTECTED]
