i need to create an alert rule for our firewall systems.
we’re using a internal ipls network by our provider. with librenms i get the traffic informations by a port of the router. this port is configured to 1gbit speed but our WAN speed is 8 mbit/s.
so now i want to create an alert rule when the traffic over time X is by 7mbit/s.
how can i configure that?
If your interface speed is 1000, then: macros.port_usage_perc >= 0.7 AND macros.port_up = 1 AND macros.port = 1
and if your port has a description it could look like:
macros.port_usage_perc >= 0.7 AND macros.port_up = 1 AND macros.port = 1 AND ports.ifAlias LIKE 'thisismyportdesciption%'
Then you might want to MAP it to a firewall or firewall group in the alert.
You should be able to control time, by changing the delay e.g if you have 5 minute polling time, then 6m you would be sure would cover 2 polls (10 mins), so it would only alert if >=7Mbps over 10 mins e.g