Threshold
The thresholds routine runs whenever you like, it process the collected statistics in the RRDs and compares the numbers to stored thresholds in this table and if exceeded raises an event for that device. The thresholds use the device 'role' to weight the events.
The threshold routine is typically run every 15mins from cron. The most recent 15min average of the snmp variable is calculated from the stored rrd values, and compared to the threshold policy table.
Yu can set a policy of all zeros, to effectively disable thresholding for a device, or class of devices. This means that for a device, or a class of devices based on role and type, you can turn off proactive events. For example, useful for switches which may have a high port churn, as users turn off hosts at night, so the procative interface availibility event can be disabled, but still keep proactive interface utilisation, etc
reachable
reachable is the % of the reachability of a device, for the past 15 mins.
Will raise event 'Proactive Reachability Threshold'
response
response is a threshold for the ping response time of a device in ms, as average over the past 15mins.
Will raise event 'Proactive Response Time Threshold'
cpu
15 mins average CPU time.
Will raise event 'Proactive CPU Threshold'
Mem
mem is the % buffer and % I/O memory used, against the total router memory. so a high % used is not a good thing.
Will raise event 'Proactive Memory Threshold'
nonucast
nonucast is the average number of broadcast packets seen in the last 15 mins - useful for trapping broadcast storms. Should not peak to more than 5% of the ucast packets.
Will raise event 'Proactive Interface Input NonUnicast Threshold ifDescr'
Will raise event 'Proactive Interface Output NonUnicast Threshold ifDescr'
util
util is line utilisation expressed as a % of the interface bandwidth, either default or configured with a band statement on the interface. On a serial line, anything over 60% ( 15min average) will cause a router queue and that is not a good thing.
Will raise event 'Proactive Interface Input Utilisation Threshold ifDescr'
Will raise event 'Proactive Interface Output Utilisation Threshold ifDescr'
int_avail
int_avail is a 15min summary of the availability (up) of a individual interface.
Will raise event 'Proactive Availability Threshold Interface ifDescr'
avail
avail is the 15 min summary of the total device interface availability , as a % of up against total (i.e) % Availability = 100 * total device interface 'operStatus' / device 'operCount'
Will raise event 'Proactive Interface Availability Threshold'
modem
modem is the number of dead modems in a chassis.
Will raise event 'Proactive Dead Modem Threshold"
modem_util
modem_util is the number of modems unavailable in a chassis.
Will raise event 'Proactive Modem Utilisation Threshold'