I'm not sure how reliable trying to do it with syslog would be across vendors.

Doing it with uptime would also occasionally have false positives when the SNMP agent's counters wrap, but it's still probably more reliable.

Iirc we also have a device_rebooted metric which can be used for this.

Adam.

Sent from BlueMail

On 25 May 2018, at 18:33, Ricardo Franco Cantero <r.francocantero@tsp-bombeeck.nl> wrote:

Hi,

What would be the best way to create an alert on reboot?
For example after a power outage?

Would that be an alert checker with up_time less than 20 minutes?
Or a syslog alert with /rebooted/  ?

Kind regards,

Ricardo Franco Cantero

observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium