Alerting on disabled port err-disabled

Help
1

Hi All,

I did a bunch of searching and theres very few threads on this. However I did see a feature request on it, but not sure if it got implemented or how it works (if at all)

Basically sometimes we have users who plug in routers, or switches that send bpdu’s and the port will go in an err-disabled state for port security reasons. We fix it and off we go, however I’d love to be able to be alerted when this happens.

The only thing I found in the if then statements is ports.disabled and I’m not sure if thats the same thing or not.

Anyone shed some light?

2

There is no straightforward way directly from libre.

if you are using librenms to collect syslog as well then below alert rule works

image
image788×253 8.67 KB

3

Ok thanks, ill try and have graylog parse through those then maybe.