Question

Hi to all:

I have problems with "StatusFlap" type alerts, the truth is that the platform send me many messages to my email, so, does anyone know if they are false positives? My network devices have no problems on the interfaces, how can i stop this?

let me know please, kind regards

Iván Martínez 

Edited by ivan_martinez

Share this post


Link to post
Share on other sites

4 answers to this question

Recommended Posts

  • 3

Hi Ivan,

We are pulling the Status and Status Flap metrics via SNMP directly from the device.  It is unlikely that these are false positives. Status Flap and Status alerts are common for access switches where you have users turning their machines off and on, unplugging when leaving for the day, connecting/disconnecting mobile devices, etc.  For these situations, we suggest creating an Instance Group and adding the appropriate 'user access' interfaces to the group.  Then turning off Status and Status Flap monitoring for that Instance Group.  The interfaces that are important, trunk ports, VLANs, Uplinks, etc will continue to be fully monitored. 

https://www.logicmonitor.com/support/devices/device-datasources-instances/instance-groups/

Regards,

-Troy

Share this post


Link to post
Share on other sites
  • 1

Hi Ether,

Yes, there is a more targeted way to turn off only Status and Status Flaps for specific interfaces that you've added to an Instance Group.  If you create an Instance Group under your main Interfaces, then add the interfaces for which you want to disable Status and Status Flap monitoring to that Instance Group.  Then, go to Alert Tuning on that new Instance Group and uncheck Status and Status Flap to disable just that monitoring on those interfaces.  

Hope this helps!

-Troy

Share this post


Link to post
Share on other sites
  • 0

Troy, 

You mentioned "turning off Status and Status Flap monitoring for that Instance Group". Do you mean doing a blanket Disable Alerting on the instance group or is there a more targeted way to only choose Status and Status Flap to not be monitored? Perhaps a setting in the Interface datasource itself?

Thanks,

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.