Ruth,
Thanks for the info - this is a good first start.
The only problem I see with this is that the interface statistics aren't part of any probes. So I guess one could write a probe that takes a particular ifIndex and polls it - but that doesn't seem too scalable.
Is there any way to modify the information shown for interfaces attached to a device?
--
matt
Ruth Kurniawati wrote:
Hi Matt,
Currently you can do this by saving the old values in different variables.
The evaluation of calculations in a probe proceeds from top to bottom (with
the exeption that OID variables are executed at the very beginning).
The variable values from the last evaluation are still available in the
current evaluation (as long as the variables haven't been assigned new
values).
An example for custom SNMP probe with N=3 is below.
<snmp-device-variables>
Prev3OctetIn, $Prev2OctetIn, CALCULATION, "InOctets from 3 polls before" Prev2OctetIn, $Prev1OctetIn, CALCULATION, "InOctets from 2 polls before" Prev1OctetIn, $CurrentOctetIn, CALCULATION, "InOctets from previous poll"
OctetIn, 1.3.6.1.2.1.2.2.1.10.2, INTEGER, "InOctets"
<!-- need to cache $OctetIn to be able to access its value in the next iteration. -->
CurrentOctetIn, $OctetIn, CALCULATION, "Cache current InOctets"
</snmp-device-variables>
Thanks, Ruth Kurniawati Dartware, LLC
-----Original Message----- From: [email protected] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Stevens Sent: Tuesday, January 25, 2005 5:41 PM To: [email protected] Subject: [IM-Talk] Alerts based on change
I have a question that may turn into a feature request.
I'd like to generate some sort of an alarm when a given probe variable changes more than X in N polls.
Ie. I have a link that's transmitting 1000 packets-per-second. I'd like to get an alarm if it jumps 3000 packets-per-second in one polling period. Yet, it's totally normal for this link to do 4kpps - so I can't just set a threshold at 4kpps.
I can't see a way to do this currently. It seems that if you had access to the previous N values of a variable you could then do calculations based on them. If N was one I'd be happy enough - if it was configurable (or just larger) I'd be even more happy.
Does anybody have other ideas or solutions?
____________________________________________________________________
List archives: http://www.mail-archive.com/intermapper-talk%40list.dartware.com/
To unsubscribe: send email to: [EMAIL PROTECTED]
