Submit a ticketCall us

Looking to compare latest NPM features with previous versions of NPM?
The NPM new feature summary offers a comparison of new features and improvements offered with this release.

 

Home > Success Center > Network Performance Monitor (NPM) > Interface state Error disabled alert on syslog event

Interface state Error disabled alert on syslog event

Created by Malik Haider, last modified by MindTouch on Jun 23, 2016

Views: 149 Votes: 0 Revisions: 6

Overview

This article describes the issue when you want to have an alert for the interface Error disabled. 

 

 

Interface state Error disabled alert on syslog event

This is when you receive a syslog message err-disable state and you want to have an advanced alert for that particular state of an interface. 

Environment

NPM version 11.5 and later

 

Cause 

Currently this interface status monitoring is a feature request in the NPM, therefore, it's not available by default in NPM at this point.

 

Resolution

You can create an Advanced SQL Alert and use the SQL query in order to get alerted once this syslog message is received within the Syslog service. 

1. Go to Manage Alerts > Create New Alert > Select Custom SQL Alert (Advances option).

2. Select following option as shown in the screenshot below:  

 

 

For an exiting console:

 

JOIN

[Syslog] s on Nodes.NodeID = s.NodeID

  where s.Message LIKE '%Configured from console%'  

 

For Error Disable state:

 

JOIN

[Syslog] s on Nodes.NodeID = s.NodeID

  where s.Message LIKE '%err-disable state%'  

 

 

~~ If you like to be more specific ~~ 

WHERE DATEDIFF(SECOND, DateTime, GETDATE()) 1.2) 

 

Example below 

 

JOIN
[Syslog] s on Nodes.NodeID = s.NodeID
  WHERE s.Ip LIKE '172.18.60.34' 
    AND s.Message LIKE '%err-disable state%'
    AND DATEDIFF(SECOND, s.DateTime, GETDATE()) <= 58

 

 

 

Last modified
23:24, 22 Jun 2016

Tags

Classifications

Public