I think you want to do variance from a base line of sessions. We
don't have a great way to do this today. RRD does have a feature
using Hold-Winters forecasting... now I can't say I have fully
grokked this but its something we plan to implement (or at least get
a good understanding of) in the near future. :)
-EAD
On Jan 19, 2007, at 5:58 PM, Soren Williams wrote:
We are monitoring a bunch of firewalls with Zenoss and would like to
have it trigger an alarm when a session threshold is reached. The
problem is each site has varying normal sessions so an arbitrary
number
of sessions won't work. Is there a way to set a threshold based on the
average number of sessions, instead of a set number?
I realize there is probably some RRD variable that could be used
but I'm
not sure what.
The reasoning behind this is most viruses we see spike our session
count
so it's a fairly good indication of something going wrong.
_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users
_______________________________________________
zenoss-users mailing list
[email protected]
http://lists.zenoss.org/mailman/listinfo/zenoss-users