Is there a way to setup an alert so we get notified when a particular switch port traffic is abnormally dropped?
You could either look at the absolute value of inbound/outbound traffic on a port e.g. less than 10Mbps:
ports.port_id = 333 AND ports.ifInOctets_rate < 1310720
Or look for a low value change in the octet count delta:
ports.port_id = 333 AND ports.ifInOctets_delta < 1000
1 Like