Email Notification when router gets down

Hi Raghav,

Instead of using a script, perhaps you could use the trap adapter in Smarts IP and the RestartTrapThreshold?

A System Unstable notification will be generated for a device if the number of coldStart traps received from a device exceeds the threshold in one hour:

1.) Configure the routers to send SNMP traps to the Smarts IP trap adapter.

2.) Configure the RestartTrapThreshold and RestartTrapWindow settings in Smarts IP -> Polling & Thresholds -> Thresholds tab -> System Resource Groups -> Routers -> Settings -> Connectivity.

3.) Set the RestartTrapThreshold to 5.

4.) Set the RestartTrapWindow to 3600 seconds (1 hour).

The router will send a coldStart SNMP trap to the Smarts IP Trap adapter each time it starts up.

If the number of coldStart traps received from one particular device in one hour exceeds 5 the Unstable Event is generated. 

As regards generating an email, you could simply using the Mail Notify Adapter in Smarts IP to notify you when the Device Unstable notification is generated.

Please see the Smarts IP documentation for more information, specifically the IP deployment Guide.

Kind Regards,

Paul O'Rourke

Paul,

thanks for your knowledge sharing, it's easy to understand.

Hello Paul,

In our environment we do not have TA. If I configure TA then I need to ask device configuration team to enable SNMP on each device beacuse at present the configuration doesnot support it and this will be a huge job.

Normally we create an escalation policy with class=router ,event=down and we can add count as 5.

Now if we want to compare with time, I think Last notify compared with First notify which should be equal to 60 mins. I am not sure if this will work or not.

Any suggestions would be highly appreciated !!!

Regards,

Raghav

Hi Raghav,

Similar to what you have mentioned below, you could achieve this using a hook script.

Please find hook script attached.

I have tested this in my test SAM domain.

Basically, the hook script checks the time difference between the First Notify and Last Notify values.

If the values are greater than one hour (3600 seconds) and if the Count value is greater that 4, the hook script will place the string "Alert" into the User Defined Field 1.

You can then setup an escalation policy to email you if any Router Down notifications have the string "Alert" in the User Defined Field 1.

Please find hook script attached.

Kind Regards,

Paul O'Rourke

Hello Paul,

what if event happened again on count 5.... it will again send out an email and keep sending out emails for every count after 4, unless this is what Raghv is looking for.

Regards,

David Zhou

Thanks Paul you are a gem of a person..... Thanks for your support ....