Cusom SQL Alert for OSPF neighbors down

[brytonh]

I apologize in advance if this has already been answered, but I’ve looked everywhere. At the reddit link below, you can see a user came up with an SQL query that he claims would work. We are trying to do something similar by getting a count of neighbors and a count of ospf ports per device_id, and compare the two. If they do not match, we would like to alert.

I am failing to create such SQL query in an alert in Libre and it says it cannot be parsed. Can anyone provide guidance? The problem is that once an OSPF neighbor goes down, it will no longer be remembered by LibreNMS due to the nature of OSPF and neighbor discovery.

Thanks,

Possibly related topics:

OSPF Adjacency changes

Hi @tnielsen2 The neighbor is removed only at the next discovery process, which means you should get the alert between the issue and the discovery. But at discovery time, only the online neighbors can be known. Unlike BGP, there is no neighbor definition in OSPF, most of the time, multicast hellos are used: There is basically no way for the network device to know if a neighbor disappeared on purpose or if it is an issue/incident. And LibreNMS polls the device, so LibreNMS has no way to determ…

https://www.reddit.com/r/networking/comments/am3soa/anyone_have_a_working_ospf_alert_in_librenms/