traffic spike
-
Hello,
Was wondering if any of you have had issues with snmp bandwidth polling on netxms. Huge spikes showing up at a random basis is quite annoying - whether it being because of counter resets or what not. (screenshots attached)
My question is, is there a way to bypass this? I mean i have seen similar posts and found one of the devs mentioning a transformation script, which essentially just limits the maximum value your network can handle, then returns the max bandwidth your interface can handle ie
if ($1 > 1000)
Ā return 1000;
return $1;
OR some sort of a fixed value you assign via script, which I'd rather not use
Anyone got any ideas? is it possible to return the last polled value if the current poll exceeded the limit? or are there any other methods /ideas? thanks in advance
-
I've used the scripts in this blog post when searching for DCI spike removal.
https://lasiszm.wordpress.com/2017/10/22/netxms-template-for-monitoring-mikrotik-interfaces/Looks like this question has been asked in the forums too:
https://www.netxms.org/forum/feature-requests/dci-spike-removal/ -
-
Ha! you're right I did skim the post, apologies for not really helping!
I suppose the challenge is that all different types of equipment/vendor might have spikes to different values depending on how their SNMP implementation works in certain situations.Ā Differentiating a real spike vs an artifact could be hard to do.Ā I guess finding a generic one-size-fits all solution is the problem (no hardcoded values).
Thinking out loud, is there any way in NXSL to retrieve the node's current interface link speed and use that to dynamically set the max interface value in the transformation script.Ā Anything over and above that (maybe by a certain factor) is transformed as per the first link?
Guess it depends if there's any way to map a given SNMP DCI (maybe interface name) back to the relevant Node Interface object in order to retrieve the link speed value?
-
Hi,
it is possible to access node's interface list from transformation script and read interface speed property, so it is possible to set cap on traffic value based on interface speed.
Best regards,
Victor
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better š
Register Login