You’re probably being too restrictive with this ruleset. Why limit it to an ifType if you’re directly specifying ifIndexes?
On Cisco subinterfaces don’t have the ifType ethernetCsmacd, so this association won’t work in any event.
You should perhaps use ifName/ifDescr and put the actual port names in, to make the association easier to read, too.
adam.
From: Arnoldo Vidal Bravo via observium observium@lists.observium.org Sent: 14 October 2022 15:16 To: Observium observium@lists.observium.org Cc: Arnoldo Vidal Bravo arnoldo.vidal@pucv.cl Subject: [Observium] Re: alert by amount of traffic
sql show port_label and ifIndex
after rebuild...
El vie, 14 oct 2022 a las 9:55, Arnoldo Vidal Bravo (<arnoldo.vidal@pucv.cl mailto:arnoldo.vidal@pucv.cl >) escribió:
it is not possible to create traffic alert on a subinterface. They only work with physical interfaces...
we already tried
El vie, 14 oct 2022 a las 9:50, Adam Armstrong via observium (<observium@lists.observium.org mailto:observium@lists.observium.org >) escribió:
I still don't really understand the problem.
In Observium there's no difference between an "interface" and a "subinterface".
They're all just entries in IF-MIB.
adam.
Arnoldo Vidal Bravo via observium wrote on 2022-10-14 12:38:
attached graphical explanation
El jue, 13 oct 2022 a las 20:24, Adam Armstrong via observium (<observium@lists.observium.org mailto:observium@lists.observium.org >) escribió:
I’m not sure what you mean by subinterface.
If it exists in Observium as a port, you can alert on it. If it doesn’t, you can’t.
Adam.
From: Arnoldo Vidal Bravo via observium <observium@lists.observium.org mailto:observium@lists.observium.org > Sent: 13 October 2022 21:20 To: Observium <observium@lists.observium.org mailto:observium@lists.observium.org > Cc: Arnoldo Vidal Bravo <arnoldo.vidal@pucv.cl mailto:arnoldo.vidal@pucv.cl > Subject: [Observium] Re: alert by amount of traffic
Yes, it works same a common interface. in the examples available, we can setup an alert when RX bps is greater 90% on any interface... works fine , but we can't do same thing on a subinterface.
El jue, 13 oct 2022 a las 15:20, Adam Armstrong via observium (<observium@lists.observium.org mailto:observium@lists.observium.org >) escribió:
Do the subinterfaces have traffic counters?
A traffic alert is fairly trivial, there are examples in the docs, I think.
You can’t alert on “x traffic in x hours/days/weeks”, but you can alert on “x bps”.
Adam.
From: Arnoldo Vidal Bravo via observium <observium@lists.observium.org mailto:observium@lists.observium.org > Sent: 13 October 2022 12:51 To: Observium <observium@observium.org mailto:observium@observium.org > Cc: Arnoldo Vidal Bravo <arnoldo.vidal@pucv.cl mailto:arnoldo.vidal@pucv.cl > Subject: [Observium] alert by amount of traffic
Hi,
We have a observium 22.1.11868. how we can have an alert by amount of traffic in a subinterface?.
Explanation, on the interface we have an ISP provider, but there 2 subinterfaces, national traffic and international traffic.
