Arista

Arista Networks is the leader in building scalable high-performance and ultra-low-latency networks for today's data center and cloud computing environments.

Available solutions




This template is for Zabbix version: 7.0

Source: https://git.zabbix.com/projects/ZBX/repos/zabbix/browse/templates/net/arista_snmp?at=release/7.0

Arista by SNMP

Overview

This template is designed for the effortless deployment of Arista monitoring by Zabbix via SNMP and doesn't require any external scripts.

Requirements

Zabbix version: 7.0 and higher.

Tested versions

This template has been tested on:

  • Arista DCS-7050Q-16 EOS version 4.12.6

Configuration

Zabbix should be configured according to the instructions in the Templates out of the box section.

Setup

Refer to the vendor documentation.

Macros used

Name Description Default
{$PSU_CRIT_STATUS} 2
{$FAN_CRIT_STATUS} 3
{$VFS.FS.FSNAME.NOT_MATCHES}

Used in filesystem discovery. Can be overridden on the host or linked template level.

^(/dev|/sys|/run|/proc|.+/shm$)
{$VFS.FS.FSNAME.MATCHES}

Used in filesystem discovery. Can be overridden on the host or linked template level.

.+
{$VFS.FS.FSTYPE.NOT_MATCHES}

Used in filesystem discovery. Can be overridden on the host or linked template level.

CHANGE_IF_NEEDED
{$VFS.FS.FSTYPE.MATCHES}

Used in filesystem discovery. Can be overridden on the host or linked template level.

.*(\.4|\.9|hrStorageFixedDisk|hrStorageFlashMemory)$
{$VFS.FS.FREE.MIN.CRIT}

The critical threshold of the filesystem utilization.

5G
{$VFS.FS.FREE.MIN.WARN}

The warning threshold of the filesystem utilization.

10G
{$VFS.FS.PUSED.MAX.CRIT} 90
{$VFS.FS.PUSED.MAX.WARN} 80
{$CPU.UTIL.CRIT} 90
{$MEMORY.UTIL.MAX}

The warning threshold of the "Physical memory: Memory utilization" item.

90
{$MEMORY.TYPE.NOT_MATCHES}

This macro is used in memory discovery. Can be overridden on the host or linked template level if you need to filter out results.

CHANGE_IF_NEEDED
{$MEMORY.TYPE.MATCHES}

This macro is used in memory discovery. Can be overridden on the host or linked template level.

.*(\.2|hrStorageRam)$
{$MEMORY.NAME.MATCHES}

This macro is used in memory discovery. Can be overridden on the host or linked template level.

.*
{$MEMORY.NAME.NOT_MATCHES}

Filter is overridden to ignore RAM(Cache) and RAM(Buffers) memory objects.

(Buffer|Cache)
{$SNMP.TIMEOUT}

Time interval for the SNMP availability trigger.

5m
{$ICMP_LOSS_WARN}

Warning threshold of ICMP packet loss in %.

20
{$ICMP_RESPONSE_TIME_WARN}

Warning threshold of the average ICMP response time in seconds.

0.15
{$IF.ERRORS.WARN}

Warning threshold of error packet rate. Can be used with interface name as context.

2
{$IF.UTIL.MAX} 90
{$IFCONTROL} 1
{$NET.IF.IFNAME.MATCHES} ^.*$
{$NET.IF.IFNAME.NOT_MATCHES}

Filter out loopbacks, nulls, docker veth links and docker0 bridge by default

Macro too long. Please see the template.
{$NET.IF.IFOPERSTATUS.MATCHES} ^.*$
{$NET.IF.IFOPERSTATUS.NOT_MATCHES}

Ignore notPresent(6)

^6$
{$NET.IF.IFADMINSTATUS.MATCHES} ^.*
{$NET.IF.IFADMINSTATUS.NOT_MATCHES}

Ignore down(2) administrative status

^2$
{$NET.IF.IFDESCR.MATCHES} .*
{$NET.IF.IFDESCR.NOT_MATCHES} CHANGE_IF_NEEDED
{$NET.IF.IFALIAS.MATCHES} .*
{$NET.IF.IFALIAS.NOT_MATCHES} CHANGE_IF_NEEDED
{$NET.IF.IFTYPE.MATCHES} .*
{$NET.IF.IFTYPE.NOT_MATCHES} CHANGE_IF_NEEDED

Items

Name Description Type Key and additional info
Get sensors

Gets sensors with type, description, and thresholds.

SNMP agent sensors.get

Preprocessing

  • JavaScript: The text is too long. Please see the template.

CPU utilization

MIB: HOST-RESOURCES-MIB

The average, over the last minute, of the percentage of time that processors was not idle.

Implementations may approximate this one minute smoothing period if necessary.

SNMP agent system.cpu.util

Preprocessing

  • JSON Path: $..['{#CPU.UTIL}'].avg()

Uptime (network)

MIB: SNMPv2-MIB

Time (in hundredths of a second) since the network management portion of the system was last re-initialized.

SNMP agent system.net.uptime[sysUpTime.0]

Preprocessing

  • Custom multiplier: 0.01

Uptime (hardware)

MIB: HOST-RESOURCES-MIB

The amount of time since this host was last initialized. Note that this is different from sysUpTime in the SNMPv2-MIB [RFC1907] because sysUpTime is the uptime of the network management portion of the system.

SNMP agent system.hw.uptime[hrSystemUptime.0]

Preprocessing

  • Check for not supported value: any error

    ⛔️Custom on fail: Set value to: 0

  • Custom multiplier: 0.01

SNMP traps (fallback)

The item is used to collect all SNMP traps unmatched by other snmptrap items

SNMP trap snmptrap.fallback
System location

MIB: SNMPv2-MIB

Physical location of the node (e.g., equipment room, 3rd floor). If not provided, the value is a zero-length string.

SNMP agent system.location[sysLocation.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

System contact details

MIB: SNMPv2-MIB

The textual identification of the contact person for this managed node, together with information on how to contact this person. If no contact information is known, the value is the zero-length string.

SNMP agent system.contact[sysContact.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

System object ID

MIB: SNMPv2-MIB

The vendor's authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determiningwhat kind of box' is being managed. For example, if vendorFlintstones, Inc.' was assigned the subtree1.3.6.1.4.1.4242, it could assign the identifier 1.3.6.1.4.1.4242.1.1 to its `Fred Router'.

SNMP agent system.objectid[sysObjectID.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

System name

MIB: SNMPv2-MIB

An administratively-assigned name for this managed node.By convention, this is the node's fully-qualified domain name. If the name is unknown, the value is the zero-length string.

SNMP agent system.name

Preprocessing

  • Discard unchanged with heartbeat: 12h

System description

MIB: SNMPv2-MIB

A textual description of the entity. This value should

include the full name and version identification of the system's hardware type, software operating-system, and

networking software.

SNMP agent system.descr[sysDescr.0]

Preprocessing

  • Discard unchanged with heartbeat: 12h

SNMP agent availability

Availability of SNMP checks on the host. The value of this item corresponds to availability icons in the host list.

Possible values:

0 - not available

1 - available

2 - unknown

Zabbix internal zabbix[host,snmp,available]
ICMP ping Simple check icmpping
ICMP loss Simple check icmppingloss
ICMP response time Simple check icmppingsec

Triggers

Name Description Expression Severity Dependencies and additional info
High CPU utilization

CPU utilization is too high. The system might be slow to respond.

min(/Arista by SNMP/system.cpu.util,5m)>{$CPU.UTIL.CRIT} Warning
Host has been restarted

Uptime is less than 10 minutes.

(last(/Arista by SNMP/system.hw.uptime[hrSystemUptime.0])>0 and last(/Arista by SNMP/system.hw.uptime[hrSystemUptime.0])<10m) or (last(/Arista by SNMP/system.hw.uptime[hrSystemUptime.0])=0 and last(/Arista by SNMP/system.net.uptime[sysUpTime.0])<10m) Warning Manual close: Yes
Depends on:
  • No SNMP data collection
System name has changed

The name of the system has changed. Acknowledge to close the problem manually.

last(/Arista by SNMP/system.name,#1)<>last(/Arista by SNMP/system.name,#2) and length(last(/Arista by SNMP/system.name))>0 Info Manual close: Yes
No SNMP data collection

SNMP is not available for polling. Please check device connectivity and SNMP settings.

max(/Arista by SNMP/zabbix[host,snmp,available],{$SNMP.TIMEOUT})=0 Warning Depends on:
  • Unavailable by ICMP ping
Unavailable by ICMP ping

Last three attempts returned timeout. Please check device connectivity.

max(/Arista by SNMP/icmpping,#3)=0 High
High ICMP ping loss min(/Arista by SNMP/icmppingloss,5m)>{$ICMP_LOSS_WARN} and min(/Arista by SNMP/icmppingloss,5m)<100 Warning Depends on:
  • Unavailable by ICMP ping
High ICMP ping response time

Average ICMP response time is too high.

avg(/Arista by SNMP/icmppingsec,5m)>{$ICMP_RESPONSE_TIME_WARN} Warning Depends on:
  • High ICMP ping loss
  • Unavailable by ICMP ping

LLD rule Temperature discovery

Name Description Type Key and additional info
Temperature discovery

ENTITY-SENSORS-MIB::EntitySensorDataType discovery with temperature filter

Dependent item temp.discovery

Item prototypes for Temperature discovery

Name Description Type Key and additional info
{#SENSOR_INFO}: Temperature

MIB: ENTITY-SENSORS-MIB

The most recent measurement obtained by the agent for this sensor.

To correctly interpret the value of this object, the associated entPhySensorType,

entPhySensorScale, and entPhySensorPrecision objects must also be examined.

SNMP agent sensor.temp.value[entPhySensorValue.{#SNMPINDEX}]

Preprocessing

  • Custom multiplier: 0.1

{#SENSOR_INFO}: Temperature status

MIB: ENTITY-SENSORS-MIB

The operational status of the sensor {#SENSOR_INFO}

SNMP agent sensor.temp.status[entPhySensorOperStatus.{#SNMPINDEX}]

Trigger prototypes for Temperature discovery

Name Description Expression Severity Dependencies and additional info
{#SENSOR_INFO}: Temperature is below the warning threshold

This trigger uses temperature sensor values defined in the device.

max(/Arista by SNMP/sensor.temp.value[entPhySensorValue.{#SNMPINDEX}],5m) < {#THRESHOLD_LO_WARN} Warning Depends on:
  • {#SENSOR_INFO}: Temperature is below the critical threshold
{#SENSOR_INFO}: Temperature is below the critical threshold

This trigger uses temperature sensor values defined in the device.

max(/Arista by SNMP/sensor.temp.value[entPhySensorValue.{#SNMPINDEX}],5m) < {#THRESHOLD_LO_CRIT} High
{#SENSOR_INFO}: Temperature is above the warning threshold

This trigger uses temperature sensor values defined in the device.

min(/Arista by SNMP/sensor.temp.value[entPhySensorValue.{#SNMPINDEX}],5m) > {#THRESHOLD_HI_WARN} Warning Depends on:
  • {#SENSOR_INFO}: Temperature is above the critical threshold
{#SENSOR_INFO}: Temperature is above the critical threshold

This trigger uses temperature sensor values defined in the device.

min(/Arista by SNMP/sensor.temp.value[entPhySensorValue.{#SNMPINDEX}],5m) > {#THRESHOLD_HI_CRIT} High

LLD rule Fan discovery

Name Description Type Key and additional info
Fan discovery

ENTITY-SENSORS-MIB::EntitySensorDataType discovery with rpm filter

Dependent item fan.discovery

Item prototypes for Fan discovery

Name Description Type Key and additional info
{#SENSOR_INFO}: Fan speed

MIB: ENTITY-SENSORS-MIB

The most recent measurement obtained by the agent for this sensor.

To correctly interpret the value of this object, the associated entPhySensorType,

entPhySensorScale, and entPhySensorPrecision objects must also be examined.

SNMP agent sensor.fan.speed[entPhySensorValue.{#SNMPINDEX}]
{#SENSOR_INFO}: Fan status

MIB: ENTITY-SENSORS-MIB

The operational status of the sensor {#SENSOR_INFO}

SNMP agent sensor.fan.status[entPhySensorOperStatus.{#SNMPINDEX}]

Trigger prototypes for Fan discovery

Name Description Expression Severity Dependencies and additional info
{#SENSOR_INFO}: Fan speed is below the warning threshold

This trigger uses fan sensor values defined in the device.

max(/Arista by SNMP/sensor.fan.speed[entPhySensorValue.{#SNMPINDEX}],5m) < {#THRESHOLD_LO_WARN} Warning Depends on:
  • {#SENSOR_INFO}: Fan speed is below the critical threshold
  • {#SENSOR_INFO}: Fan is in critical state
{#SENSOR_INFO}: Fan speed is below the critical threshold

This trigger uses fan sensor values defined in the device.

max(/Arista by SNMP/sensor.fan.speed[entPhySensorValue.{#SNMPINDEX}],5m) < {#THRESHOLD_LO_CRIT} High Depends on:
  • {#SENSOR_INFO}: Fan is in critical state
{#SENSOR_INFO}: Fan speed is above the warning threshold

This trigger uses fan sensor values defined in the device.

min(/Arista by SNMP/sensor.fan.speed[entPhySensorValue.{#SNMPINDEX}],5m) > {#THRESHOLD_HI_WARN} Warning Depends on:
  • {#SENSOR_INFO}: Fan speed is above the critical threshold
  • {#SENSOR_INFO}: Fan is in critical state
{#SENSOR_INFO}: Fan speed is above the critical threshold

This trigger uses fan sensor values defined in the device.

min(/Arista by SNMP/sensor.fan.speed[entPhySensorValue.{#SNMPINDEX}],5m) > {#THRESHOLD_HI_CRIT} High Depends on:
  • {#SENSOR_INFO}: Fan is in critical state
{#SENSOR_INFO}: Fan is in critical state

Please check the fan unit

count(/Arista by SNMP/sensor.fan.status[entPhySensorOperStatus.{#SNMPINDEX}],#1,"eq","{$FAN_CRIT_STATUS}")=1 Average

LLD rule Voltage discovery

Name Description Type Key and additional info
Voltage discovery

ENTITY-SENSORS-MIB::EntitySensorDataType discovery with volts filter

Dependent item voltage.discovery

Item prototypes for Voltage discovery

Name Description Type Key and additional info
{#SENSOR_INFO}: Voltage

MIB: ENTITY-SENSORS-MIB

The most recent measurement obtained by the agent for this sensor.

To correctly interpret the value of this object, the associated entPhySensorType,

entPhySensorScale, and entPhySensorPrecision objects must also be examined.

SNMP agent sensor.voltage.value[entPhySensorValue.{#SNMPINDEX}]

Trigger prototypes for Voltage discovery

Name Description Expression Severity Dependencies and additional info
{#SENSOR_INFO}: Voltage is below the warning threshold

This trigger uses voltage sensor values defined in the device.

max(/Arista by SNMP/sensor.voltage.value[entPhySensorValue.{#SNMPINDEX}],5m) < {#THRESHOLD_LO_WARN} Warning Depends on:
  • {#SENSOR_INFO}: Voltage is below the critical threshold
{#SENSOR_INFO}: Voltage is below the critical threshold

This trigger uses voltage sensor values defined in the device.

max(/Arista by SNMP/sensor.voltage.value[entPhySensorValue.{#SNMPINDEX}],5m) < {#THRESHOLD_LO_CRIT} High
{#SENSOR_INFO}: Voltage is above the warning threshold

This trigger uses voltage sensor values defined in the device.

min(/Arista by SNMP/sensor.voltage.value[entPhySensorValue.{#SNMPINDEX}],5m) > {#THRESHOLD_HI_WARN} Warning Depends on:
  • {#SENSOR_INFO}: Voltage is above the critical threshold
{#SENSOR_INFO}: Voltage is above the critical threshold

This trigger uses voltage sensor values defined in the device.

min(/Arista by SNMP/sensor.voltage.value[entPhySensorValue.{#SNMPINDEX}],5m) > {#THRESHOLD_HI_CRIT} High

LLD rule Entity discovery

Name Description Type Key and additional info
Entity discovery SNMP agent entity.discovery

Item prototypes for Entity discovery

Name Description Type Key and additional info
{#ENT_NAME}: Hardware model name

MIB: ENTITY-MIB

SNMP agent system.hw.model[entPhysicalModelName.{#SNMPINDEX}]

Preprocessing

  • Discard unchanged with heartbeat: 6h

{#ENT_NAME}: Hardware serial number

MIB: ENTITY-MIB

SNMP agent system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}]

Preprocessing

  • Discard unchanged with heartbeat: 6h

Trigger prototypes for Entity discovery

Name Description Expression Severity Dependencies and additional info
{#ENT_NAME}: Device has been replaced

Device serial number has changed. Acknowledge to close the problem manually.

last(/Arista by SNMP/system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}],#1)<>last(/Arista by SNMP/system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}],#2) and length(last(/Arista by SNMP/system.hw.serialnumber[entPhysicalSerialNum.{#SNMPINDEX}]))>0 Info Manual close: Yes

LLD rule PSU discovery

Name Description Type Key and additional info
PSU discovery SNMP agent psu.discovery

Item prototypes for PSU discovery

Name Description Type Key and additional info
{#ENT_NAME}: Power supply status

MIB: ENTITY-STATE-MIB

SNMP agent sensor.psu.status[entStateOper.{#SNMPINDEX}]

Trigger prototypes for PSU discovery

Name Description Expression Severity Dependencies and additional info
{#ENT_NAME}: Power supply is in critical state

Please check the power supply unit for errors

count(/Arista by SNMP/sensor.psu.status[entStateOper.{#SNMPINDEX}],#1,"eq","{$PSU_CRIT_STATUS}")=1 Average

LLD rule Storage discovery

Name Description Type Key and additional info
Storage discovery

HOST-RESOURCES-MIB::hrStorage discovery with storage filter.

SNMP agent vfs.fs.discovery[snmp]

Item prototypes for Storage discovery

Name Description Type Key and additional info
{#FSNAME}: Used space

MIB: HOST-RESOURCES-MIB

The amount of the storage represented by this entry that is allocated, in units of hrStorageAllocationUnits.

SNMP agent vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]

Preprocessing

  • Custom multiplier: {#ALLOC_UNITS}

{#FSNAME}: Total space

MIB: HOST-RESOURCES-MIB

The size of the storage represented by this entry, in units of hrStorageAllocationUnits.

This object is writable to allow remote configuration of the size of the storage area in those cases where such an operation makes sense and is possible on the underlying system.

For example, the amount of main storage allocated to a buffer pool might be modified or the amount of disk space allocated to virtual storage might be modified.

SNMP agent vfs.fs.total[hrStorageSize.{#SNMPINDEX}]

Preprocessing

  • Custom multiplier: {#ALLOC_UNITS}

{#FSNAME}: Space utilization

The space utilization expressed in % for {#FSNAME}.

Calculated vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}]

Trigger prototypes for Storage discovery

Name Description Expression Severity Dependencies and additional info
{#FSNAME}: Disk space is critically low

Two conditions should match:
1. The first condition - utilization of the space should be above {$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}.
2. The second condition should be one of the following:
- the disk free space is less than {$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"};
- the disk will be full in less than 24 hours.

last(/Arista by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}])>{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"} and ((last(/Arista by SNMP/vfs.fs.total[hrStorageSize.{#SNMPINDEX}])-last(/Arista by SNMP/vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]))<{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"} or timeleft(/Arista by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}],1h,100)<1d) Average Manual close: Yes
{#FSNAME}: Disk space is low

Two conditions should match:
1. The first condition - utilization of the space should be above {$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}.
2. The second condition should be one of the following:
- the disk free space is less than {$VFS.FS.FREE.MIN.WARN:"{#FSNAME}"};
- the disk will be full in less than 24 hours.

last(/Arista by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}])>{$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"} and ((last(/Arista by SNMP/vfs.fs.total[hrStorageSize.{#SNMPINDEX}])-last(/Arista by SNMP/vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]))<{$VFS.FS.FREE.MIN.WARN:"{#FSNAME}"} or timeleft(/Arista by SNMP/vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}],1h,100)<1d) Warning Manual close: Yes
Depends on:
  • {#FSNAME}: Disk space is critically low

LLD rule Memory discovery

Name Description Type Key and additional info
Memory discovery

HOST-RESOURCES-MIB::hrStorage discovery with memory filter

SNMP agent vm.memory.discovery

Item prototypes for Memory discovery

Name Description Type Key and additional info
{#MEMNAME}: Used memory

MIB: HOST-RESOURCES-MIB

The amount of the storage represented by this entry that is allocated, in units of hrStorageAllocationUnits.

SNMP agent vm.memory.used[hrStorageUsed.{#SNMPINDEX}]

Preprocessing

  • Custom multiplier: {#ALLOC_UNITS}

{#MEMNAME}: Total memory

MIB: HOST-RESOURCES-MIB

The size of the storage represented by this entry, in units of hrStorageAllocationUnits.

This object is writable to allow remote configuration of the size of the storage area in those cases where such an operation makes sense and is possible on the underlying system.

For example, the amount of main memory allocated to a buffer pool might be modified or the amount of disk space allocated to virtual memory might be modified.

SNMP agent vm.memory.total[hrStorageSize.{#SNMPINDEX}]

Preprocessing

  • Custom multiplier: {#ALLOC_UNITS}

{#MEMNAME}: Memory utilization

Memory utilization in %.

Calculated vm.memory.util[memoryUsedPercentage.{#SNMPINDEX}]

Trigger prototypes for Memory discovery

Name Description Expression Severity Dependencies and additional info
{#MEMNAME}: High memory utilization

The system is running out of free memory.

min(/Arista by SNMP/vm.memory.util[memoryUsedPercentage.{#SNMPINDEX}],5m)>{$MEMORY.UTIL.MAX} Average

LLD rule Network interfaces discovery

Name Description Type Key and additional info
Network interfaces discovery

Discovering interfaces from IF-MIB.

SNMP agent net.if.discovery

Item prototypes for Network interfaces discovery

Name Description Type Key and additional info
Interface {#IFNAME}({#IFALIAS}): Operational status

MIB: IF-MIB

The current operational state of the interface.

- The testing(3) state indicates that no operational packet scan be passed

- If ifAdminStatus is down(2) then ifOperStatus should be down(2)

- If ifAdminStatus is changed to up(1) then ifOperStatus should change to up(1) if the interface is ready to transmit and receive network traffic

- It should change todormant(5) if the interface is waiting for external actions (such as a serial line waiting for an incoming connection)

- It should remain in the down(2) state if and only if there is a fault that prevents it from going to the up(1) state

- It should remain in the notPresent(6) state if the interface has missing(typically, hardware) components.

SNMP agent net.if.status[ifOperStatus.{#SNMPINDEX}]
Interface {#IFNAME}({#IFALIAS}): Bits received

MIB: IF-MIB

The total number of octets received on the interface, including framing characters. This object is a 64-bit version of ifInOctets. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.

SNMP agent net.if.in[ifHCInOctets.{#SNMPINDEX}]

Preprocessing

  • Change per second
  • Custom multiplier: 8

Interface {#IFNAME}({#IFALIAS}): Bits sent

MIB: IF-MIB

The total number of octets transmitted out of the interface, including framing characters. This object is a 64-bit version of ifOutOctets.Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.

SNMP agent net.if.out[ifHCOutOctets.{#SNMPINDEX}]

Preprocessing

  • Change per second
  • Custom multiplier: 8

Interface {#IFNAME}({#IFALIAS}): Inbound packets with errors

MIB: IF-MIB

For packet-oriented interfaces, the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.

SNMP agent net.if.in.errors[ifInErrors.{#SNMPINDEX}]

Preprocessing

  • Change per second
Interface {#IFNAME}({#IFALIAS}): Outbound packets with errors

MIB: IF-MIB

For packet-oriented interfaces, the number of outbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of outbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.

SNMP agent net.if.out.errors[ifOutErrors.{#SNMPINDEX}]

Preprocessing

  • Change per second
Interface {#IFNAME}({#IFALIAS}): Outbound packets discarded

MIB: IF-MIB

The number of outbound packets which were chosen to be discarded

even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.

One possible reason for discarding such a packet could be to free up buffer space.

Discontinuities in the value of this counter can occur at re-initialization of the management system,

and at other times as indicated by the value of ifCounterDiscontinuityTime.

SNMP agent net.if.out.discards[ifOutDiscards.{#SNMPINDEX}]

Preprocessing

  • Change per second
Interface {#IFNAME}({#IFALIAS}): Inbound packets discarded

MIB: IF-MIB

The number of inbound packets which were chosen to be discarded

even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.

One possible reason for discarding such a packet could be to free up buffer space.

Discontinuities in the value of this counter can occur at re-initialization of the management system,

and at other times as indicated by the value of ifCounterDiscontinuityTime.

SNMP agent net.if.in.discards[ifInDiscards.{#SNMPINDEX}]

Preprocessing

  • Change per second
Interface {#IFNAME}({#IFALIAS}): Interface type

MIB: IF-MIB

The type of interface.

Additional values for ifType are assigned by the Internet Assigned Numbers Authority (IANA),

through updating the syntax of the IANAifType textual convention.

SNMP agent net.if.type[ifType.{#SNMPINDEX}]

Preprocessing

  • Discard unchanged with heartbeat: 1d

Interface {#IFNAME}({#IFALIAS}): Speed

MIB: IF-MIB

An estimate of the interface's current bandwidth in units of 1,000,000 bits per second. If this object reports a value of n' then the speed of the interface is somewhere in the range of n-500,000' to`n+499,999'. For interfaces which do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth. For a sub-layer which has no concept of bandwidth, this object should be zero.

SNMP agent net.if.speed[ifHighSpeed.{#SNMPINDEX}]

Preprocessing

  • Custom multiplier: 1000000

  • Discard unchanged with heartbeat: 1h

Trigger prototypes for Network interfaces discovery

Name Description Expression Severity Dependencies and additional info
Interface {#IFNAME}({#IFALIAS}): Link down

This trigger expression works as follows:
1. It can be triggered if the operations status is down.
2. {$IFCONTROL:"{#IFNAME}"}=1 - a user can redefine the context macro to "0", marking this interface as not important. No new trigger will be fired if this interface is down.
3. {TEMPLATE_NAME:METRIC.diff()}=1 - the trigger fires only if the operational status was up to (1) sometime before (so, does not fire for "eternal off" interfaces.)

WARNING: if closed manually - it will not fire again on the next poll, because of .diff.

{$IFCONTROL:"{#IFNAME}"}=1 and last(/Arista by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])=2 and (last(/Arista by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#1)<>last(/Arista by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}],#2)) Average Manual close: Yes
Interface {#IFNAME}({#IFALIAS}): High bandwidth usage

The utilization of the network interface is close to its estimated maximum bandwidth.

(avg(/Arista by SNMP/net.if.in[ifHCInOctets.{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Arista by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}]) or avg(/Arista by SNMP/net.if.out[ifHCOutOctets.{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Arista by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])) and last(/Arista by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 Warning Manual close: Yes
Depends on:
  • Interface {#IFNAME}({#IFALIAS}): Link down
Interface {#IFNAME}({#IFALIAS}): High error rate

It recovers when it is below 80% of the {$IF.ERRORS.WARN:"{#IFNAME}"} threshold.

min(/Arista by SNMP/net.if.in.errors[ifInErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"} or min(/Arista by SNMP/net.if.out.errors[ifOutErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"} Warning Manual close: Yes
Depends on:
  • Interface {#IFNAME}({#IFALIAS}): Link down
Interface {#IFNAME}({#IFALIAS}): Ethernet has changed to lower speed than it was before

This Ethernet connection has transitioned down from its known maximum speed. This might be a sign of autonegotiation issues. Acknowledge to close the problem manually.

change(/Arista by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])<0 and last(/Arista by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 and ( last(/Arista by SNMP/net.if.type[ifType.{#SNMPINDEX}])=6 or last(/Arista by SNMP/net.if.type[ifType.{#SNMPINDEX}])=7 or last(/Arista by SNMP/net.if.type[ifType.{#SNMPINDEX}])=11 or last(/Arista by SNMP/net.if.type[ifType.{#SNMPINDEX}])=62 or last(/Arista by SNMP/net.if.type[ifType.{#SNMPINDEX}])=69 or last(/Arista by SNMP/net.if.type[ifType.{#SNMPINDEX}])=117 ) and (last(/Arista by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2) Info Manual close: Yes
Depends on:
  • Interface {#IFNAME}({#IFALIAS}): Link down

LLD rule EtherLike-MIB Discovery

Name Description Type Key and additional info
EtherLike-MIB Discovery

Discovering interfaces from IF-MIB and EtherLike-MIB. Interfaces with up(1) Operational Status are discovered.

SNMP agent net.if.duplex.discovery

Preprocessing

  • JavaScript: The text is too long. Please see the template.

Item prototypes for EtherLike-MIB Discovery

Name Description Type Key and additional info
Interface {#IFNAME}({#IFALIAS}): Duplex status

MIB: EtherLike-MIB

The current mode of operation of the MAC

entity. 'unknown' indicates that the current

duplex mode could not be determined.

Management control of the duplex mode is

accomplished through the MAU MIB. When

an interface does not support autonegotiation,

or when autonegotiation is not enabled, the

duplex mode is controlled using

ifMauDefaultType. When autonegotiation is

supported and enabled, duplex mode is controlled

using ifMauAutoNegAdvertisedBits. In either

case, the currently operating duplex mode is

reflected both in this object and in ifMauType.

Note that this object provides redundant

information with ifMauType. Normally, redundant

objects are discouraged. However, in this

instance, it allows a management application to

determine the duplex status of an interface

without having to know every possible value of

ifMauType. This was felt to be sufficiently

valuable to justify the redundancy.

Reference: [IEEE 802.3 Std.], 30.3.1.1.32,aDuplexStatus.

SNMP agent net.if.duplex[dot3StatsDuplexStatus.{#SNMPINDEX}]

Trigger prototypes for EtherLike-MIB Discovery

Name Description Expression Severity Dependencies and additional info
Interface {#IFNAME}({#IFALIAS}): In half-duplex mode

Please check autonegotiation settings and cabling.

last(/Arista by SNMP/net.if.duplex[dot3StatsDuplexStatus.{#SNMPINDEX}])=2 Warning Manual close: Yes

Feedback

Please report any issues with the template at https://support.zabbix.com

You can also provide feedback, discuss the template, or ask for help at ZABBIX forums

Articles and documentation

+ Propose new article

Didn't find what you are looking for?