Port up\down syslog check event
-
Подскажите пожалуйста как реализовать такую хотелку
Необходимо мониторить и выявлять так называемые "флапающие" порты, например в лог падает такое:
297 2016-02-19 17:18:46 Port 1 link up, 100Mbps FULL duplex 296 2016-02-19 17:18:44 Port 1 link down 295 2016-02-19 17:18:43 Port 1 link up, 100Mbps FULL duplex 294 2016-02-19 17:18:41 Port 1 link down 293 2016-02-19 17:18:41 Port 1 link up, 100Mbps FULL duplex 292 2016-02-19 17:18:39 Port 1 link down 291 2016-02-19 17:18:38 Port 1 link up, 100Mbps FULL duplex 290 2016-02-19 17:18:36 Port 1 link down 289 2016-02-19 17:18:36 Port 1 link up, 100Mbps FULL duplex 288 2016-02-19 17:18:34 Port 1 link down 287 2016-02-19 17:18:33 Port 1 link up, 100Mbps FULL duplex 286 2016-02-19 17:18:31 Port 1 link down 285 2016-02-19 17:18:31 Port 1 link up, 100Mbps FULL duplex 284 2016-02-19 17:18:29 Port 1 link down 283 2016-02-19 17:18:28 Port 1 link up, 100Mbps FULL duplex 282 2016-02-19 17:18:26 Port 1 link down 281 2016-02-19 17:18:26 Port 1 link up, 100Mbps FULL duplex 280 2016-02-19 17:18:24 Port 1 link down 279 2016-02-19 17:18:23 Port 1 link up, 100Mbps FULL duplex 278 2016-02-19 17:18:21 Port 1 link down 277 2016-02-19 17:18:21 Port 1 link up, 100Mbps FULL duplex 276 2016-02-19 17:18:19 Port 1 link down 275 2016-02-19 17:18:18 Port 1 link up, 100Mbps FULL duplex 274 2016-02-19 17:18:16 Port 1 link down 273 2016-02-19 17:18:15 Port 1 link up, 100Mbps FULL duplex 272 2016-02-19 17:18:13 Port 1 link down 271 2016-02-19 17:18:13 Port 1 link up, 100Mbps FULL duplex 270 2016-02-19 17:18:11 Port 1 link down 269 2016-02-19 17:18:10 Port 1 link up, 100Mbps FULL duplex 268 2016-02-19 17:18:08 Port 1 link down 267 2016-02-19 17:18:08 Port 1 link up, 100Mbps FULL duplexИ это может быть до бесконечности, причин там много, в основном физика. Как бы это дело запихнуть в Syslog parser и сделать так, чтобы при достижении некоторых Samples (например если более 30 раз порт флапнулся) срабатывал эвент?
-
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login