Alert: port traffic abnormally dropped

Is there a way to setup an alert so we get notified when a particular switch port traffic is abnormally dropped?

You could either look at the absolute value of inbound/outbound traffic on a port e.g. less than 10Mbps:

ports.port_id = 333 AND ports.ifInOctets_rate < 1310720

Or look for a low value change in the octet count delta:

ports.port_id = 333 AND ports.ifInOctets_delta < 1000

1 Like