Hello, I am unable to figure out how to create an alert to notify me when our VPN boxes go into failover mode.
Observium recognizes the event, but I would like a notification. The following output is from the poller. The normal condition value for “Failover Primary unit” should be ‘active’.
o Status Count 2 +---------------------------------------+-----------------------------------------+-------+--------+---------+---------+---------------------+ | Descr | Type | Index | Origin | Value | Status | Last Changed | +---------------------------------------+-----------------------------------------+-------+--------+---------+---------+---------------------+ | Failover Primary unit | cisco-firewall-hardware-primary-state | 6 | snmp | standby | warning | 2020-06-07 07:30:03 | | Failover Secondary unit (this device) | cisco-firewall-hardware-secondary-state | 7 | snmp | active | warning | 2020-06-07 07:30:04 | +---------------------------------------+-----------------------------------------+-------+--------+---------+---------+——————————+
I’ve tried several strings to make this work, but the Alerter either marks it as OK or does not show the above Statuses at all.
* status_event equal warn * status_event ne ok * “Failover Primary unit” ne active * also without quotes and with underscores between * “Failover Primary unit” equal warn * also without quotes and with underscores between * cisco-firewall-hardware-primary-state equal warn * cisco-firewall-hardware-primary-state equal standby
Could anyone assist me in creating this Alert Checker? Thank you
Anthony Pisano | Network Design Engineer | IMSS anthony.pisano@caltech.edumailto:anthony.pisano@caltech.edu | (626) 395-4255tel:(626)%20395-4255 | Caltech | caltech.eduhttp://caltech.edu/
Hi,
For associations you probably want:
Status Type | in | cisco-firewall-hardware-primary-state
for test conditions:
status_value ne active
You can reverse it to check when the secondary unit becomes active. Match secondary unit and check for ne standby.
adam.
From: observium observium-bounces@observium.org On Behalf Of Pisano, Anthony D. via observium Sent: 08 June 2020 19:09 To: observium@observium.org Cc: Pisano, Anthony D. anthony.pisano@caltech.edu Subject: [Observium] Help creating an Alert Checker
Hello,
I am unable to figure out how to create an alert to notify me when our VPN boxes go into failover mode.
Observium recognizes the event, but I would like a notification.
The following output is from the poller. The normal condition value for “Failover Primary unit” should be ‘active’.
o Status Count 2
+---------------------------------------+-----------------------------------------+-------+--------+---------+---------+---------------------+
| Descr | Type | Index | Origin | Value | Status | Last Changed |
+---------------------------------------+-----------------------------------------+-------+--------+---------+---------+---------------------+
| Failover Primary unit | cisco-firewall-hardware-primary-state | 6 | snmp | standby | warning | 2020-06-07 07:30:03 |
| Failover Secondary unit (this device) | cisco-firewall-hardware-secondary-state | 7 | snmp | active | warning | 2020-06-07 07:30:04 |
+---------------------------------------+-----------------------------------------+-------+--------+---------+---------+——————————+
I’ve tried several strings to make this work, but the Alerter either marks it as OK or does not show the above Statuses at all.
* status_event equal warn * status_event ne ok * “Failover Primary unit” ne active
* also without quotes and with underscores between
* “Failover Primary unit” equal warn
* also without quotes and with underscores between
* cisco-firewall-hardware-primary-state equal warn * cisco-firewall-hardware-primary-state equal standby
Could anyone assist me in creating this Alert Checker?
Thank you
Anthony Pisano | Network Design Engineer | IMSS mailto:anthony.pisano@caltech.edu anthony.pisano@caltech.edu | tel:(626)%20395-4255 (626) 395-4255 | Caltech | caltech.edu http://caltech.edu/
Thank you, that did it!
Anthony Pisano | Network Design Engineer | IMSS anthony.pisano@caltech.edumailto:anthony.pisano@caltech.edu | (626) 395-4255tel:(626)%20395-4255 | Caltech | caltech.eduhttp://caltech.edu/
On Jun 8, 2020, at 8:13 PM, Adam Armstrong via observium <observium@observium.orgmailto:observium@observium.org> wrote:
Hi,
For associations you probably want:
Status Type | in | cisco-firewall-hardware-primary-state
for test conditions:
status_value ne active
You can reverse it to check when the secondary unit becomes active. Match secondary unit and check for ne standby.
adam.
From: observium <observium-bounces@observium.orgmailto:observium-bounces@observium.org> On Behalf Of Pisano, Anthony D. via observium Sent: 08 June 2020 19:09 To: observium@observium.orgmailto:observium@observium.org Cc: Pisano, Anthony D. anthony.pisano@caltech.edu Subject: [Observium] Help creating an Alert Checker
Hello, I am unable to figure out how to create an alert to notify me when our VPN boxes go into failover mode.
Observium recognizes the event, but I would like a notification. The following output is from the poller. The normal condition value for “Failover Primary unit” should be ‘active’.
o Status Count 2 +---------------------------------------+-----------------------------------------+-------+--------+---------+---------+---------------------+ | Descr | Type | Index | Origin | Value | Status | Last Changed | +---------------------------------------+-----------------------------------------+-------+--------+---------+---------+---------------------+ | Failover Primary unit | cisco-firewall-hardware-primary-state | 6 | snmp | standby | warning | 2020-06-07 07:30:03 | | Failover Secondary unit (this device) | cisco-firewall-hardware-secondary-state | 7 | snmp | active | warning | 2020-06-07 07:30:04 | +---------------------------------------+-----------------------------------------+-------+--------+---------+---------+——————————+
I’ve tried several strings to make this work, but the Alerter either marks it as OK or does not show the above Statuses at all.
* status_event equal warn * status_event ne ok * “Failover Primary unit” ne active
* also without quotes and with underscores between
* “Failover Primary unit” equal warn
* also without quotes and with underscores between
* cisco-firewall-hardware-primary-state equal warn * cisco-firewall-hardware-primary-state equal standby
Could anyone assist me in creating this Alert Checker? Thank you
Anthony Pisano | Network Design Engineer | IMSS anthony.pisano@caltech.edumailto:anthony.pisano@caltech.edu | (626) 395-4255tel:(626)%20395-4255 | Caltech | caltech.eduhttp://caltech.edu/
_______________________________________________ observium mailing list observium@observium.orgmailto:observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
participants (2)
-
Adam Armstrong -
Pisano, Anthony D.