Notification filter based on service values

General
1

Hello, and thank you for your time.

I monitor network switches, and each interface is a “service” with a set of monitored values.

Sample notification output for context:

[switch01], (up), MAC: 00:xx:xx:xx:xx:xx, Speed: 10 GBit/s, In: 41.7 MB/s (3.33%), Out: 32.3 MB/s (2.58%), Discards out: 0.046% (warn/crit at 0.01%/0.5%)WARN

A custom rule with thresholds defines the WARN and CRIT states.

The question: Is there a way to exclude alerts triggered by “Discards” for emails, but send those alerts via a different channel instead? There are service filters, but no service-values filter for more control.

Appreciate any help, and have a wonderful day.

2

I do not think there is such a mechanism, but can you explain, why you would want e.g., “Errors” to be sent via email to Bob, while “Discards” would be sent to Alice via SMS?

3

Hello, and thank you for your question.

My goal is to send email notifications only to those who have SOP on how to address them.

If I can isolate a notification rule for a specific value metric, then I can notify only the relevant people about the issue, instead of forcing everyone to analyze each and every alert that has a 5% chance of being relevant to a receiver.

I hope this makes more sense now. Have a wonderful day.

4

Thanks for outlining the use case. Frankly I think being able to distinguish based on service makes more sense, as one metric without the other of the same service makes little sense.

What you could do is probably create custom plugins to separate the specific metrics into dedicated services and notify on those.

5

Thank you, your suggested approach is the only I know, and I wanted to make sure there is no other (better) way of doing it.

I guess I need to figure out how to make my own plugin.

1 Like