Alert for port utilization (eg. over 80% for past 60 minutes)

Looking to create an Alert that triggers on a port utilization threshold over time.

The standard Alert works fine. i.e. When a port reaches x% , it triggers.

Need something that looks back an hour and if it finds a port that’s been over 80%
for that entire hour, triggers an alert.

Thanks,

Chris

Edit the rule and set 60m as delay.

Thanks for your quick response.

Just so I understand the function of Delay, in this case:

The interface will have to maintain utilization above the 80% threshold for
the entire 60 minute delay time in order to trigger the Alert ?

But if utilization dips to say 70% anytime during that 60 minute period, that potential Alert
never happens and the port would now have to go above 80% utilization (restart the whole
cycle) and again stay above that threshold for 60 minutes to ultimately trigger the Alert ?

Chris

1 Like

Yes, exactly what you said.

So I’ve got to be missing something.

Not only is the Alert firing when when Utilization has been
90+ for only 5 minutes, but it’s also not ignoring interfaces
I’ve listed to ignore. (see attachments)

Chris

About the time, you have setup 1m delay and 1h Interval.

That means alert will fire in 1 minute, and after 1st notification, you will be remembered every hour by another notification.

About the ignored interfaces… Are you sure it is if.Name and not if.Descr? Also, I think you should set Doesnt begin with or use not regex insteand doesnt contain

Thanks for the tip on the Regex. I’m switching to that, should be more effective.

On the Delay and Interval thing. I thought Utilization would have to be above 90% for
an Hour (Interval) and then it would wait a Minute (Delay) before firing the first alert.

If that’s not the intended function of those two items, what would you recommend to
make an alert work like I described?

Chris

Delay means how many time the condition must match before firing the alert.

Interval is the time betwen notifications.

So, in your case, Delay will be 1h

Interval is up to you. Remember, this value is the time betwen notifications, so if set to 5min you will get the 1s notification alert after one hour of over 80% and then every 5 min while the alert condition still up.