Thank you, that did it!

Anthony Pisano
 | Network Design Engineer | IMSS
anthony.pisano@caltech.edu | (626) 395-4255 | Caltech | caltech.edu

On Jun 8, 2020, at 8:13 PM, Adam Armstrong via observium <observium@observium.org> wrote:

Hi,
 
For associations you probably want: 
 
Status Type | in | cisco-firewall-hardware-primary-state
 
for  test conditions: 
 
status_value ne active
 
You can reverse it to check when the secondary unit becomes active. Match secondary unit and check for ne standby.
 
adam.
 
 
From: observium <observium-bounces@observium.org> On Behalf Of Pisano, Anthony D. via observium
Sent: 08 June 2020 19:09
To: observium@observium.org
Cc: Pisano, Anthony D. <anthony.pisano@caltech.edu>
Subject: [Observium] Help creating an Alert Checker
 
Hello, 
I am unable to figure out how to create an alert to notify me when our VPN boxes go into failover mode.
 
Observium recognizes the event, but I would like a notification.
The following output is from the poller. The normal condition value for “Failover Primary unit” should be ‘active’. 
 
 o Status Count         2
+---------------------------------------+-----------------------------------------+-------+--------+---------+---------+---------------------+
| Descr                                 | Type                                    | Index | Origin | Value   | Status  | Last Changed        |
+---------------------------------------+-----------------------------------------+-------+--------+---------+---------+---------------------+
| Failover Primary unit                 | cisco-firewall-hardware-primary-state   | 6     | snmp   | standby | warning | 2020-06-07 07:30:03 |
| Failover Secondary unit (this device) | cisco-firewall-hardware-secondary-state | 7     | snmp   | active  | warning | 2020-06-07 07:30:04 |
+---------------------------------------+-----------------------------------------+-------+--------+---------+---------+——————————+
 
I’ve tried several strings to make this work, but the Alerter either marks it as OK or does not show the above Statuses at all.
  • status_event equal warn
  • status_event ne ok
  • “Failover Primary unit” ne active 
    • also without quotes and with underscores between
  • “Failover Primary unit” equal warn
    • also without quotes and with underscores between
  • cisco-firewall-hardware-primary-state equal warn
  • cisco-firewall-hardware-primary-state equal standby


Could anyone assist me in creating this Alert Checker?
Thank you

Anthony Pisano
 | Network Design Engineer | IMSS
anthony.pisano@caltech.edu | (626) 395-4255 | Caltech | caltech.edu
 
_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium