LACP Toggling, Threshold Alarm in EMC

  • 0
  • 1
  • Question
  • Updated 2 years ago
  • Answered
Hello,

recently, we had a problem with a toggling LACP group and as a result a bigger network outage.
We currently collect all the switch logs inside Netsight/EMC.

Now I would like to create an alarm, which detects toggling LACP links, so the events LACP.RemPortFromAggr and LACP.AddPortToAggr would be interesting.
But I don't want to receive alarms, if this happens only 2 times per minute - if someone restarts a server, I don't want to get an alarm.

Is there a solution to create a log-alert including a threshold?
Would be interesting for other logs as well, e.g. port up/down with > 10 times per minute...

Best Regards
Johannes
Photo of Chacko

Chacko

  • 1,206 Points 1k badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of Stephen Williams

Stephen Williams, Employee

  • 9,076 Points 5k badge 2x thumb
I'm not sure there is in Netsight.  Lets see if a Netsight pro can confirm.
Photo of Michal Rz

Michal Rz

  • 742 Points 500 badge 2x thumb
SIEM can do that for sure. Netsight i doubt.
Photo of Chacko

Chacko

  • 1,206 Points 1k badge 2x thumb
Such a shame, would be a nice feature - then we need to look for a good SIEM I guess...