Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Network Performance Monitor (NPM) > Interface state Error disabled alert on syslog event

Interface state Error disabled alert on syslog event

Created by Malik Haider, last modified by MindTouch on Jun 23, 2016

Views: 574 Votes: 0 Revisions: 6

Overview

This article describes the issue when you want to have an alert for the interface Error disabled. 

 

 

Interface state Error disabled alert on syslog event

This is when you receive a syslog message err-disable state and you want to have an advanced alert for that particular state of an interface. 

Environment

NPM version 11.5 and later

 

Cause 

Currently this interface status monitoring is a feature request in the NPM, therefore, it's not available by default in NPM at this point.

 

Resolution

You can create an Advanced SQL Alert and use the SQL query in order to get alerted once this syslog message is received within the Syslog service. 

1. Go to Manage Alerts > Create New Alert > Select Custom SQL Alert (Advances option).

2. Select following option as shown in the screenshot below:  

 

 

For an exiting console:

 

JOIN

[Syslog] s on Nodes.NodeID = s.NodeID

  where s.Message LIKE '%Configured from console%'  

 

For Error Disable state:

 

JOIN

[Syslog] s on Nodes.NodeID = s.NodeID

  where s.Message LIKE '%err-disable state%'  

 

 

~~ If you like to be more specific ~~ 

WHERE DATEDIFF(SECOND, DateTime, GETDATE()) 1.2) 

 

Example below 

 

JOIN
[Syslog] s on Nodes.NodeID = s.NodeID
  WHERE s.Ip LIKE '172.18.60.34' 
    AND s.Message LIKE '%err-disable state%'
    AND DATEDIFF(SECOND, s.DateTime, GETDATE()) <= 58

 

 

 

Last modified

Tags

Classifications

Public