Hi,
We have a observium 22.1.11868. how we can have an alert by amount of traffic in a subinterface?.
Explanation, on the interface we have an ISP provider, but there 2 subinterfaces, national traffic and international traffic.
Do the subinterfaces have traffic counters?
A traffic alert is fairly trivial, there are examples in the docs, I think.
You can’t alert on “x traffic in x hours/days/weeks”, but you can alert on “x bps”.
Adam.
From: Arnoldo Vidal Bravo via observium observium@lists.observium.org Sent: 13 October 2022 12:51 To: Observium observium@observium.org Cc: Arnoldo Vidal Bravo arnoldo.vidal@pucv.cl Subject: [Observium] alert by amount of traffic
Hi,
We have a observium 22.1.11868. how we can have an alert by amount of traffic in a subinterface?.
Explanation, on the interface we have an ISP provider, but there 2 subinterfaces, national traffic and international traffic.
Yes, it works same a common interface. in the examples available, we can setup an alert when RX bps is greater 90% on any interface... works fine , but we can't do same thing on a subinterface.
El jue, 13 oct 2022 a las 15:20, Adam Armstrong via observium (< observium@lists.observium.org>) escribió:
Do the subinterfaces have traffic counters?
A traffic alert is fairly trivial, there are examples in the docs, I think.
You can’t alert on “x traffic in x hours/days/weeks”, but you can alert on “x bps”.
Adam.
*From:* Arnoldo Vidal Bravo via observium observium@lists.observium.org *Sent:* 13 October 2022 12:51 *To:* Observium observium@observium.org *Cc:* Arnoldo Vidal Bravo arnoldo.vidal@pucv.cl *Subject:* [Observium] alert by amount of traffic
Hi,
We have a observium 22.1.11868. how we can have an alert by amount of traffic in a subinterface?.
Explanation, on the interface we have an ISP provider, but there 2 subinterfaces, national traffic and international traffic.
--
Saluda cordialmente
[image: Image removed by sender.]
observium mailing list -- observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.org
I’m not sure what you mean by subinterface.
If it exists in Observium as a port, you can alert on it. If it doesn’t, you can’t.
Adam.
From: Arnoldo Vidal Bravo via observium observium@lists.observium.org Sent: 13 October 2022 21:20 To: Observium observium@lists.observium.org Cc: Arnoldo Vidal Bravo arnoldo.vidal@pucv.cl Subject: [Observium] Re: alert by amount of traffic
Yes, it works same a common interface. in the examples available, we can setup an alert when RX bps is greater 90% on any interface... works fine , but we can't do same thing on a subinterface.
El jue, 13 oct 2022 a las 15:20, Adam Armstrong via observium (<observium@lists.observium.org mailto:observium@lists.observium.org >) escribió:
Do the subinterfaces have traffic counters?
A traffic alert is fairly trivial, there are examples in the docs, I think.
You can’t alert on “x traffic in x hours/days/weeks”, but you can alert on “x bps”.
Adam.
From: Arnoldo Vidal Bravo via observium <observium@lists.observium.org mailto:observium@lists.observium.org > Sent: 13 October 2022 12:51 To: Observium <observium@observium.org mailto:observium@observium.org > Cc: Arnoldo Vidal Bravo <arnoldo.vidal@pucv.cl mailto:arnoldo.vidal@pucv.cl > Subject: [Observium] alert by amount of traffic
Hi,
We have a observium 22.1.11868. how we can have an alert by amount of traffic in a subinterface?.
Explanation, on the interface we have an ISP provider, but there 2 subinterfaces, national traffic and international traffic.
attached graphical explanation
[image: image.png]
El jue, 13 oct 2022 a las 20:24, Adam Armstrong via observium (< observium@lists.observium.org>) escribió:
I’m not sure what you mean by subinterface.
If it exists in Observium as a port, you can alert on it. If it doesn’t, you can’t.
Adam.
*From:* Arnoldo Vidal Bravo via observium observium@lists.observium.org *Sent:* 13 October 2022 21:20 *To:* Observium observium@lists.observium.org *Cc:* Arnoldo Vidal Bravo arnoldo.vidal@pucv.cl *Subject:* [Observium] Re: alert by amount of traffic
Yes, it works same a common interface. in the examples available, we can setup an alert when RX bps is greater 90% on any interface... works fine , but we can't do same thing on a subinterface.
El jue, 13 oct 2022 a las 15:20, Adam Armstrong via observium (< observium@lists.observium.org>) escribió:
Do the subinterfaces have traffic counters?
A traffic alert is fairly trivial, there are examples in the docs, I think.
You can’t alert on “x traffic in x hours/days/weeks”, but you can alert on “x bps”.
Adam.
*From:* Arnoldo Vidal Bravo via observium observium@lists.observium.org *Sent:* 13 October 2022 12:51 *To:* Observium observium@observium.org *Cc:* Arnoldo Vidal Bravo arnoldo.vidal@pucv.cl *Subject:* [Observium] alert by amount of traffic
Hi,
We have a observium 22.1.11868. how we can have an alert by amount of traffic in a subinterface?.
Explanation, on the interface we have an ISP provider, but there 2 subinterfaces, national traffic and international traffic.
--
Saluda cordialmente
[image: Image removed by sender.]
observium mailing list -- observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.org
--
Saluda cordialmente
[image: Image removed by sender.]
observium mailing list -- observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.org
I still don't really understand the problem.
In Observium there's no difference between an "interface" and a "subinterface".
They're all just entries in IF-MIB.
adam.
Arnoldo Vidal Bravo via observium wrote on 2022-10-14 12:38:
attached graphical explanation
image.png
El jue, 13 oct 2022 a las 20:24, Adam Armstrong via observium (<observium@lists.observium.org mailto:observium@lists.observium.org>) escribió:
I’m not sure what you mean by subinterface. If it exists in Observium as a port, you can alert on it. If it doesn’t, you can’t. Adam. *From:*Arnoldo Vidal Bravo via observium <observium@lists.observium.org <mailto:observium@lists.observium.org>> *Sent:* 13 October 2022 21:20 *To:* Observium <observium@lists.observium.org <mailto:observium@lists.observium.org>> *Cc:* Arnoldo Vidal Bravo <arnoldo.vidal@pucv.cl <mailto:arnoldo.vidal@pucv.cl>> *Subject:* [Observium] Re: alert by amount of traffic Yes, it works same a common interface. in the examples available, we can setup an alert when RX bps is greater 90% on any interface... works fine , but we can't do same thing on a subinterface. El jue, 13 oct 2022 a las 15:20, Adam Armstrong via observium (<observium@lists.observium.org <mailto:observium@lists.observium.org>>) escribió: Do the subinterfaces have traffic counters? A traffic alert is fairly trivial, there are examples in the docs, I think. You can’t alert on “x traffic in x hours/days/weeks”, but you can alert on “x bps”. Adam. *From:*Arnoldo Vidal Bravo via observium <observium@lists.observium.org <mailto:observium@lists.observium.org>> *Sent:* 13 October 2022 12:51 *To:* Observium <observium@observium.org <mailto:observium@observium.org>> *Cc:* Arnoldo Vidal Bravo <arnoldo.vidal@pucv.cl <mailto:arnoldo.vidal@pucv.cl>> *Subject:* [Observium] alert by amount of traffic Hi, We have a observium 22.1.11868. how we can have an alert by amount of traffic in a subinterface?. Explanation, on the interface we have an ISP provider, but there 2 subinterfaces, national traffic and international traffic. -- Saluda cordialmente Image removed by sender. _______________________________________________ observium mailing list -- observium@lists.observium.org <mailto:observium@lists.observium.org> To unsubscribe send an email to observium-leave@lists.observium.org <mailto:observium-leave@lists.observium.org> -- Saluda cordialmente Image removed by sender. _______________________________________________ observium mailing list -- observium@lists.observium.org <mailto:observium@lists.observium.org> To unsubscribe send an email to observium-leave@lists.observium.org <mailto:observium-leave@lists.observium.org>
--
Saluda cordialmente
observium mailing list -- observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.org
it is not possible to create traffic alert on a subinterface. They only work with physical interfaces...
we already tried
El vie, 14 oct 2022 a las 9:50, Adam Armstrong via observium (< observium@lists.observium.org>) escribió:
I still don't really understand the problem.
In Observium there's no difference between an "interface" and a "subinterface".
They're all just entries in IF-MIB.
adam.
Arnoldo Vidal Bravo via observium wrote on 2022-10-14 12:38:
attached graphical explanation
[image: image.png]
El jue, 13 oct 2022 a las 20:24, Adam Armstrong via observium (< observium@lists.observium.org>) escribió:
I’m not sure what you mean by subinterface.
If it exists in Observium as a port, you can alert on it. If it doesn’t, you can’t.
Adam.
*From:* Arnoldo Vidal Bravo via observium observium@lists.observium.org
*Sent:* 13 October 2022 21:20 *To:* Observium observium@lists.observium.org *Cc:* Arnoldo Vidal Bravo arnoldo.vidal@pucv.cl *Subject:* [Observium] Re: alert by amount of traffic
Yes, it works same a common interface. in the examples available, we can setup an alert when RX bps is greater 90% on any interface... works fine , but we can't do same thing on a subinterface.
El jue, 13 oct 2022 a las 15:20, Adam Armstrong via observium (< observium@lists.observium.org>) escribió:
Do the subinterfaces have traffic counters?
A traffic alert is fairly trivial, there are examples in the docs, I think.
You can’t alert on “x traffic in x hours/days/weeks”, but you can alert on “x bps”.
Adam.
*From:* Arnoldo Vidal Bravo via observium observium@lists.observium.org
*Sent:* 13 October 2022 12:51 *To:* Observium observium@observium.org *Cc:* Arnoldo Vidal Bravo arnoldo.vidal@pucv.cl *Subject:* [Observium] alert by amount of traffic
Hi,
We have a observium 22.1.11868. how we can have an alert by amount of traffic in a subinterface?.
Explanation, on the interface we have an ISP provider, but there 2 subinterfaces, national traffic and international traffic.
--
Saluda cordialmente
[image: Image removed by sender.]
observium mailing list -- observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.org
--
Saluda cordialmente
[image: Image removed by sender.]
observium mailing list -- observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.org
--
Saluda cordialmente
observium mailing list -- observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.org
-- Sent from Postbox https://www.postbox-inc.com/?utm_source=email&utm_medium=siglink&utm_campaign=reach _______________________________________________ observium mailing list -- observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.org
Share your alert definitions. It is very possible to alert on any kind of interface Observium knows about.
Sent from my Verizon, Samsung Galaxy smartphone Get Outlook for Androidhttps://aka.ms/AAb9ysg ________________________________ From: Arnoldo Vidal Bravo via observium observium@lists.observium.org Sent: Friday, October 14, 2022 8:55:17 AM To: Observium observium@lists.observium.org Cc: Arnoldo Vidal Bravo arnoldo.vidal@pucv.cl Subject: [Observium] Re: alert by amount of traffic
Caution: This is an external email. Do not open attachments or click links from unknown or unexpected emails.
it is not possible to create traffic alert on a subinterface. They only work with physical interfaces...
we already tried
El vie, 14 oct 2022 a las 9:50, Adam Armstrong via observium (<observium@lists.observium.orgmailto:observium@lists.observium.org>) escribió: I still don't really understand the problem.
In Observium there's no difference between an "interface" and a "subinterface".
They're all just entries in IF-MIB.
adam.
Arnoldo Vidal Bravo via observium wrote on 2022-10-14 12:38: attached graphical explanation
[image.png]
El jue, 13 oct 2022 a las 20:24, Adam Armstrong via observium (<observium@lists.observium.orgmailto:observium@lists.observium.org>) escribió:
I’m not sure what you mean by subinterface.
If it exists in Observium as a port, you can alert on it. If it doesn’t, you can’t.
Adam.
From: Arnoldo Vidal Bravo via observium <observium@lists.observium.orgmailto:observium@lists.observium.org> Sent: 13 October 2022 21:20 To: Observium <observium@lists.observium.orgmailto:observium@lists.observium.org> Cc: Arnoldo Vidal Bravo <arnoldo.vidal@pucv.clmailto:arnoldo.vidal@pucv.cl> Subject: [Observium] Re: alert by amount of traffic
Yes, it works same a common interface. in the examples available, we can setup an alert when RX bps is greater 90% on any interface... works fine , but we can't do same thing on a subinterface.
El jue, 13 oct 2022 a las 15:20, Adam Armstrong via observium (<observium@lists.observium.orgmailto:observium@lists.observium.org>) escribió:
Do the subinterfaces have traffic counters?
A traffic alert is fairly trivial, there are examples in the docs, I think.
You can’t alert on “x traffic in x hours/days/weeks”, but you can alert on “x bps”.
Adam.
From: Arnoldo Vidal Bravo via observium <observium@lists.observium.orgmailto:observium@lists.observium.org> Sent: 13 October 2022 12:51 To: Observium <observium@observium.orgmailto:observium@observium.org> Cc: Arnoldo Vidal Bravo <arnoldo.vidal@pucv.clmailto:arnoldo.vidal@pucv.cl> Subject: [Observium] alert by amount of traffic
Hi,
We have a observium 22.1.11868. how we can have an alert by amount of traffic in a subinterface?.
Explanation, on the interface we have an ISP provider, but there 2 subinterfaces, national traffic and international traffic.
--
Saluda cordialmente
[Image removed by sender.]
_______________________________________________ observium mailing list -- observium@lists.observium.orgmailto:observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.orgmailto:observium-leave@lists.observium.org
--
Saluda cordialmente
[Image removed by sender.]
_______________________________________________ observium mailing list -- observium@lists.observium.orgmailto:observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.orgmailto:observium-leave@lists.observium.org
--
Saluda cordialmente
[https://ci3.googleusercontent.com/mail-sig/AIorK4zSp_IGIjRFyFrjo99eHvCZnmKtJ...]
_______________________________________________ observium mailing list -- observium@lists.observium.orgmailto:observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.orgmailto:observium-leave@lists.observium.org
-- Sent from Postboxhttps://www.postbox-inc.com/?utm_source=email&utm_medium=siglink&utm_campaign=reach _______________________________________________ observium mailing list -- observium@lists.observium.orgmailto:observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.orgmailto:observium-leave@lists.observium.org
--
Saluda cordialmente
[https://ci3.googleusercontent.com/mail-sig/AIorK4zSp_IGIjRFyFrjo99eHvCZnmKtJ...]
You have received a message from the law firm Miller Canfield. The information contained in or attached to this electronic mail may be privileged and/or confidential. If you received this transmission and are not the intended recipient, you should not read this message and are hereby notified that any dissemination, distribution or copying of this communication and/or its attachments is strictly prohibited. If you have received this communication in error or are not sure whether it is privileged, please immediately notify us by return e-mail and delete or destroy the original and any copies, electronic, paper or otherwise, that you may have of this communication and any attachments.
[image: image.png] sql show port_label and ifIndex
[image: image.png] after rebuild... [image: image.png]
El vie, 14 oct 2022 a las 9:55, Arnoldo Vidal Bravo (arnoldo.vidal@pucv.cl) escribió:
it is not possible to create traffic alert on a subinterface. They only work with physical interfaces...
we already tried
El vie, 14 oct 2022 a las 9:50, Adam Armstrong via observium (< observium@lists.observium.org>) escribió:
I still don't really understand the problem.
In Observium there's no difference between an "interface" and a "subinterface".
They're all just entries in IF-MIB.
adam.
Arnoldo Vidal Bravo via observium wrote on 2022-10-14 12:38:
attached graphical explanation
[image: image.png]
El jue, 13 oct 2022 a las 20:24, Adam Armstrong via observium (< observium@lists.observium.org>) escribió:
I’m not sure what you mean by subinterface.
If it exists in Observium as a port, you can alert on it. If it doesn’t, you can’t.
Adam.
*From:* Arnoldo Vidal Bravo via observium observium@lists.observium.org
*Sent:* 13 October 2022 21:20 *To:* Observium observium@lists.observium.org *Cc:* Arnoldo Vidal Bravo arnoldo.vidal@pucv.cl *Subject:* [Observium] Re: alert by amount of traffic
Yes, it works same a common interface. in the examples available, we can setup an alert when RX bps is greater 90% on any interface... works fine , but we can't do same thing on a subinterface.
El jue, 13 oct 2022 a las 15:20, Adam Armstrong via observium (< observium@lists.observium.org>) escribió:
Do the subinterfaces have traffic counters?
A traffic alert is fairly trivial, there are examples in the docs, I think.
You can’t alert on “x traffic in x hours/days/weeks”, but you can alert on “x bps”.
Adam.
*From:* Arnoldo Vidal Bravo via observium observium@lists.observium.org
*Sent:* 13 October 2022 12:51 *To:* Observium observium@observium.org *Cc:* Arnoldo Vidal Bravo arnoldo.vidal@pucv.cl *Subject:* [Observium] alert by amount of traffic
Hi,
We have a observium 22.1.11868. how we can have an alert by amount of traffic in a subinterface?.
Explanation, on the interface we have an ISP provider, but there 2 subinterfaces, national traffic and international traffic.
--
Saluda cordialmente
[image: Image removed by sender.]
observium mailing list -- observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.org
--
Saluda cordialmente
[image: Image removed by sender.]
observium mailing list -- observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.org
--
Saluda cordialmente
observium mailing list -- observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.org
-- Sent from Postbox https://www.postbox-inc.com/?utm_source=email&utm_medium=siglink&utm_campaign=reach _______________________________________________ observium mailing list -- observium@lists.observium.org To unsubscribe send an email to observium-leave@lists.observium.org
--
Saluda cordialmente
You’re probably being too restrictive with this ruleset. Why limit it to an ifType if you’re directly specifying ifIndexes?
On Cisco subinterfaces don’t have the ifType ethernetCsmacd, so this association won’t work in any event.
You should perhaps use ifName/ifDescr and put the actual port names in, to make the association easier to read, too.
adam.
From: Arnoldo Vidal Bravo via observium observium@lists.observium.org Sent: 14 October 2022 15:16 To: Observium observium@lists.observium.org Cc: Arnoldo Vidal Bravo arnoldo.vidal@pucv.cl Subject: [Observium] Re: alert by amount of traffic
sql show port_label and ifIndex
after rebuild...
El vie, 14 oct 2022 a las 9:55, Arnoldo Vidal Bravo (<arnoldo.vidal@pucv.cl mailto:arnoldo.vidal@pucv.cl >) escribió:
it is not possible to create traffic alert on a subinterface. They only work with physical interfaces...
we already tried
El vie, 14 oct 2022 a las 9:50, Adam Armstrong via observium (<observium@lists.observium.org mailto:observium@lists.observium.org >) escribió:
I still don't really understand the problem.
In Observium there's no difference between an "interface" and a "subinterface".
They're all just entries in IF-MIB.
adam.
Arnoldo Vidal Bravo via observium wrote on 2022-10-14 12:38:
attached graphical explanation
El jue, 13 oct 2022 a las 20:24, Adam Armstrong via observium (<observium@lists.observium.org mailto:observium@lists.observium.org >) escribió:
I’m not sure what you mean by subinterface.
If it exists in Observium as a port, you can alert on it. If it doesn’t, you can’t.
Adam.
From: Arnoldo Vidal Bravo via observium <observium@lists.observium.org mailto:observium@lists.observium.org > Sent: 13 October 2022 21:20 To: Observium <observium@lists.observium.org mailto:observium@lists.observium.org > Cc: Arnoldo Vidal Bravo <arnoldo.vidal@pucv.cl mailto:arnoldo.vidal@pucv.cl > Subject: [Observium] Re: alert by amount of traffic
Yes, it works same a common interface. in the examples available, we can setup an alert when RX bps is greater 90% on any interface... works fine , but we can't do same thing on a subinterface.
El jue, 13 oct 2022 a las 15:20, Adam Armstrong via observium (<observium@lists.observium.org mailto:observium@lists.observium.org >) escribió:
Do the subinterfaces have traffic counters?
A traffic alert is fairly trivial, there are examples in the docs, I think.
You can’t alert on “x traffic in x hours/days/weeks”, but you can alert on “x bps”.
Adam.
From: Arnoldo Vidal Bravo via observium <observium@lists.observium.org mailto:observium@lists.observium.org > Sent: 13 October 2022 12:51 To: Observium <observium@observium.org mailto:observium@observium.org > Cc: Arnoldo Vidal Bravo <arnoldo.vidal@pucv.cl mailto:arnoldo.vidal@pucv.cl > Subject: [Observium] alert by amount of traffic
Hi,
We have a observium 22.1.11868. how we can have an alert by amount of traffic in a subinterface?.
Explanation, on the interface we have an ISP provider, but there 2 subinterfaces, national traffic and international traffic.
participants (3)
-
Adam Armstrong
-
Arnoldo Vidal Bravo
-
Ryan, Spencer J.