It's often useful to include screenshots of the relevant parts when asking these kinds of things. It's not uncommon for what people to write in emails not to match what they think they wrote in the alert checker :D

"ifType eq ethernetCsmacd" is definitely a valid entity match, and should match the majority of ports on most networks!

adam.

On 25/01/2016 19:04:00, Joey Stanford <joey@stan4d.net> wrote:

Howdy,

I wanted to thank everyone for the great support on this mailing list.

I have another puzzler…the last one I hope.

At the bottom of https://www.observium.org/docs/alerting_examples/ there are two alerts that rely on ifType eq ethernetCsmacd

For some odd reason when I rebuild they don’t want to apply to any of my devices. As soon as I change that to “*” they bring in all the devices. I went out and pulled the data on the Mikrotik router ports and they are responding with this same ifType. I checked it vis snmpwalk and also on a test router using http://ip/device/device=1/tab=port/port=1/view=data/

I’ve tried spelling out equals, wrapping ethernetCsmacd in quotes (view=data says it’s a 14 character string), and a few other things but I haven’t found the right incantation. These two entries currently match the examples and the demo server.

I’ve ensured that I have non-disabled ports and non-ignored ports that should be recognized.

&debug=1 reveals


SELECT `alert_status` FROM `alert_table` WHERE 1 AND `alert_test_id` = '7' AND (( `device_id` NOT IN (55) AND (`device_id` != ‘' AND `device_id` IS NOT NULL))) ORDER BY `device_id`, `alert_test_id`, `entity_type`, `entity_id` DESC

(not there wasn’t a LIMIT 0,100 at the end of that select like on other alerts…aside from that this select is the same as the other alerts)

Anyway that select returned 0 hits despite me having well over 100 active ports with that ifType.

Any suggestions on how to debug this further?

Thanks,

Joey

_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium