DCS Threshold Alarms

[Joshua_Puusep]

Hello,

I'm trying to setup useful alarms in netsight for DCS threshold events. Currently we have a very basic alarm setup that triggers when custom string "DCS Measured Noise" and "Exceeded Threshold of" are matched. These are syslog events sourced from the wireless controllers and netsight groups the events based on the source. This means that you can get 50 events pertaining to different AP's and netsight will trigger only one alarm per controller and raise the hit count for each new event.

So question number one is whether there is a crafty way to separate the events based on the AP they pertain to.

Once that is in place, we would also like to make the alarm trigger only if X number of events have occurred in Y amount of time.

Does anyone have experience in configuring such parameters or know whether it is possible? Thanks much.

[Evan_Kuckelhei1]

I use Kibana on a ELK stack with the syslog input. The syslog messages only give the S/N of the AP not a hostname or location of the ap. It would be nice to have to help diagnose issues quicker.

[Joshua_Puusep]

I've actually put in a few feature requests this week, one of which is to include the AP hostname in the DCS events.

[Bob_Maheu]

Hello Joshua,

So question number one is whether there is a crafty way to separate the events based on the AP they pertain to.
[Bob]
The only way to do this is if there was something unique in the syslog message that pertains to the AP. You can then create a new Alarm Manager entry for each AP.

Once that is in place, we would also like to make the alarm trigger only if X number of events have occurred in Y amount of time.
[Bob]
This cannot be done and would need to be a feature request.

[Ronald_Dvorak]

The AP isn't a SNMP agent so all traps are tx by the controller.