Submit a ticketCall us

Get a crash course on Network Monitoring delivered right to your inbox
This free 7-day email course provides a primer to the philosophy, theory, and fundamental concepts involved in IT monitoring. Lessons will explain not only how to perform various monitoring tasks, but why and when you should use them. Sign up now.

Home > Success Center > Netflow Traffic Analyzer (NTA) > NTA 4.2.2 Administrator Guide > Alerts in NTA > NetFlow-specific predefined alerts

NetFlow-specific predefined alerts

Created by Lori Krell_ret, last modified by Alexandra.Nerpasova on Oct 24, 2016

Views: 44 Votes: 1 Revisions: 6

Alerts must be enabled to trigger when the defined condition occurs. Not all out-of-the box alerts are enabled by default.

You need Alert Management Rights to enable, create, edit, delete alerts, or to view a list of available alerts.

Where can I find what NTA-specific alerts are enabled?

  1. Click Alerts & Activity > Alerts, and click Manage Alerts in the upper right.
  2. In the Alert Manager, filter the alerts to display NTA-only items. Type netflow or CBQoS into the search box
  3. Make sure the alerts are on.

    File:Success_Center/New_Articles/NTA-Mindtouch-CHM/0F0/NTA_netflowAlerts_thumb_0_675.png

Top talker alerts

High Receive Percent Utilization with Top Talkers

This alert indicates that the traffic received by the relevant interface exceeded the defined bandwidth usage threshold.

High Transmit Percent Utilization with Top Talkers

This alert indicates that the traffic transmitted by the relevant interface exceeded the defined bandwidth usage threshold.

By default, when triggered, top talker alerts do two things:

  • When the percent utilization of an interface rises above the specified value, the alert writes the bandwidth utilization event to the SolarWinds event log. When the utilization drops back below a specified value, the alert writes another event to the log.
  • Initiate a web capture of the most current top talker information and email the information to the configured recipient.

CBQoS alerts

The CBQoS alerts can help you confirm that the CBQoS policies applied to traffic flowing through your devices are producing the intended results. For example, the default Drops alert can notify you when packets dropped as a result of a policy exceed the 1GB threshold. Specify a policy and set up alert thresholds to get an early warning about traffic processing issues and intervene to better shape network traffic.

CBQoS out-of-the-box alerts are not enabled by default because you need to specify the policy and class path to complete the trigger definition.

Pre-Policy

CBQoS Pre-Policy writes to the SolarWinds event log when the amount of Pre-Policy traffic (in bytes) meets the conditions of your alert threshold setting.

Example of alert logged: CBQoS Pre-Policy traffic in class 'class-default (MCQTest)' with policy 'policy-default (MPQTest)' on interface 'FastEthernet0/0  link to core' met the conditions of your alert threshold setting. Total Pre-Policy traffic in the past 15 minutes: 99999 Bytes.

By default, this alert writes to the Event Log. This alert also can be configured to send the information in an email to the configured recipient.

Post-Policy

CBQoS Post-Policy writes to the SolarWinds event log when the amount of Post-Policy traffic (in bytes) meets the conditions of your alert threshold setting.

Example of alert logged: CBQoS Post-Policy traffic in class 'class-default (MCQTest)' with policy 'policy-default (MPQTest)' on interface 'FastEthernet0/0 . link to core' met the conditions of your alert threshold setting. Total Post-Policy traffic in the past 15 minutes: 99999 Bytes.

By default, this alert writes to the Event Log. This alert also can be configured to send the information in an email to the configured recipient.

Drops

CBQoS Drops writes to the SolarWinds event log when applying CBQoS policies to traffic on an interface.

Example of alert logged: CBQoS Drops met your alert threshold setting as a result of applying class map 'class-default (MCQTest)' and policy map 'policy-default (MPQTest)' on interface 'FastEthernet0/0 . link to core' . Total data dropped in last 15 minutes is: 00333 Bytes.

By default, this alert writes to the Event Log. This alert also can be configured to send the information in an email to the configured recipient.

Miscellaneous

Flow storage backup failed

This alert emails you when the NTA Flow Storage Database backup fails.

 
Last modified
07:10, 24 Oct 2016

Tags

Classifications

Public