Bump
Any update to this? Specifically for 'node down' as I still can't find a way to do that outside of the built in 'node-down' event
I've managed to get alerts based on custom attributes working for other things such as SNR or Ethernet speed
I.e. in the case of ethernet speed, I want alerts on any core/distribution equipment in our network running at 100mbit as 99% of the time that will indicate a wire has gone bad. However that other 1% are ones I don't care about, edge networks with no more than i.e. 20mbit/s of bandwidth. Or something we inherited from a company acquisition. So it doesn't matter, and I want to suppress the alerts
So I just create my DCI's as I would. I set up thresholds like so...
DCI - Ethernet Speed (reported in megabits/sec)
Thresholds
script
if ($1 < GetCustomAttribute($node, "Target_EthSpeed")) return true
activation event: slack alert (with relevant details)
repeat every 86400 seconds
script
if ($1 >= GetCustomAttribute($node, "Target_EthSpeed")) return true;
activation event: sys_threshold_rearmed
repeat every 86400 seconds
last polled value
<1000
activation event: send slack alert (with relevant details)
repeat every 86400 seconds
If the custom attribute of 'Target_EthSpeed' exists, the first 2 are checked, and one of them will always trigger. The second one means it will never check the third one. So I can add Target_EthSpeed of 100 to a node
If the custom attribute doesn't exist, it ignores those first 2 conditions entirely and will use the third, in which case if its less than 1000mbit/s it will still trigger an alert
If there is a cleaner and more appropriate method i'm all ears. Either way I still need 'node down' alerts setup. As far as I can tell there is no DCI for 'node down' only 'node status' which isn't appropriate as the status code is shared with other events