Hi,

For associations you probably want:

Status Type | in | cisco-firewall-hardware-primary-state

for test conditions:

status_value ne active

You can reverse it to check when the secondary unit becomes active. Match secondary unit and check for ne standby.

adam.

From: observium <observium-bounces@observium.org> On Behalf Of Pisano, Anthony D. via observium
Sent: 08 June 2020 19:09
To: observium@observium.org
Cc: Pisano, Anthony D. <anthony.pisano@caltech.edu>
Subject: [Observium] Help creating an Alert Checker

Hello,

I am unable to figure out how to create an alert to notify me when our VPN boxes go into failover mode.

Observium recognizes the event, but I would like a notification.

The following output is from the poller. The normal condition value for “Failover Primary unit” should be ‘active’.

o Status Count 2

+---------------------------------------+-----------------------------------------+-------+--------+---------+---------+---------------------+

+---------------------------------------+-----------------------------------------+-------+--------+---------+---------+---------------------+

+---------------------------------------+-----------------------------------------+-------+--------+---------+---------+——————————+

I’ve tried several strings to make this work, but the Alerter either marks it as OK or does not show the above Statuses at all.

status_event equal warn
status_event ne ok
“Failover Primary unit” ne active

also without quotes and with underscores between

“Failover Primary unit” equal warn

also without quotes and with underscores between

cisco-firewall-hardware-primary-state equal warn
cisco-firewall-hardware-primary-state equal standby

Could anyone assist me in creating this Alert Checker?

Thank you