I finally managed to set everything up so that LibreNMS creates an alert from Syslog whenever there is a BPDU error on a port, but the the event is always delayed by a few minutes.
My only 2 rules are to check for a phrase with regex in syslog.msg AND then check if syslog.timestamp >=
macros.past_5 , with no delay set.
It seems to work, yet the alerts are still quite delayed, sometimes up to 5 minutes.
Is this tied to the snmp polling rate somehow and if so what’s a recommended polling rate without creating too much traffic? I assumed that SNMP traps and syslog could be used to create almost instantaneous alerts. Can I somehow speedup the alert generation?
Thanks in advance.