Sure - I’ve just sent a test event to the socket, so in the UI we have:
atl-csw-001 > lnms-interface-speed-reduced
Incident started 2 days ago and has continued for 3 consecutive executions."
In the JSON we have:
[
{
"status": 1,
"executed": 1586203381
},
{
"status": 1,
"executed": 1586203681
},
{
"status": 1,
"executed": 1586203981
},
{
"status": 1,
"executed": 1586204281
},
{
"status": 1,
"executed": 1586204581
},
{
"status": 1,
"executed": 1586204881
},
{
"status": 1,
"executed": 1586205181
},
{
"status": 1,
"executed": 1586205481
},
{
"status": 0,
"executed": 1586205781
},
{
"status": 0,
"executed": 1586206381
},
{
"status": 1,
"executed": 1586206686
},
{
"status": 1,
"executed": 1586206981
},
{
"status": 0,
"executed": 1586207281
},
{
"status": 1,
"executed": 1586213581
},
{
"status": 1,
"executed": 1586213881
},
{
"status": 1,
"executed": 1586214181
},
{
"status": 1,
"executed": 1586214481
},
{
"status": 0,
"executed": 1586214781
},
{
"status": 1,
"executed": 1586356381
},
{
"status": 1,
"executed": 1586356681
},
{
"status": 1,
"executed": 1586356981
}
]
I don’t see anything hugely sensitive in the full event, so it’s here if needed with a couple of annotations changed:
{
"timestamp": 1586357581,
"entity": {
"entity_class": "proxy",
"system": {
"network": {
"interfaces": null
}
},
"subscriptions": [
"entity:atl-csw-001",
"entity:atl-csw-001"
],
"last_seen": 0,
"deregister": false,
"deregistration": {},
"metadata": {
"name": "atl-csw-001",
"namespace": "default"
},
"sensu_agent_version": ""
},
"check": {
"command": "LibreNMS: {\"condition\":\"AND\",\"rules\":[{\"id\":\"ports.ifHighSpeed\",\"field\":\"ports.ifHighSpeed\",\"type\":\"string\",\"input\":\"text\",\"operator\":\"less\",\"value\":\"`ports.ifHighSpeed_prev`\"}],\"valid\":true}",
"handlers": [],
"high_flap_threshold": 0,
"interval": 300,
"low_flap_threshold": 0,
"publish": false,
"runtime_assets": null,
"subscriptions": [],
"proxy_entity_name": "atl-csw-001.inf.vjn",
"check_hooks": null,
"stdin": false,
"subdue": null,
"ttl": 0,
"timeout": 0,
"round_robin": false,
"executed": 1586357581,
"history": [
{
"status": 1,
"executed": 1586203981
},
{
"status": 1,
"executed": 1586204281
},
{
"status": 1,
"executed": 1586204581
},
{
"status": 1,
"executed": 1586204881
},
{
"status": 1,
"executed": 1586205181
},
{
"status": 1,
"executed": 1586205481
},
{
"status": 0,
"executed": 1586205781
},
{
"status": 0,
"executed": 1586206381
},
{
"status": 1,
"executed": 1586206686
},
{
"status": 1,
"executed": 1586206981
},
{
"status": 0,
"executed": 1586207281
},
{
"status": 1,
"executed": 1586213581
},
{
"status": 1,
"executed": 1586213881
},
{
"status": 1,
"executed": 1586214181
},
{
"status": 1,
"executed": 1586214481
},
{
"status": 0,
"executed": 1586214781
},
{
"status": 1,
"executed": 1586356381
},
{
"status": 1,
"executed": 1586356681
},
{
"status": 1,
"executed": 1586356981
},
{
"status": 1,
"executed": 1586357281
},
{
"status": 1,
"executed": 1586357581
}
],
"issued": 1586357581,
"output": "Alert for device atl-csw-001 - Interface speed reduced",
"state": "failing",
"status": 1,
"total_state_change": 29,
"last_ok": 1586214781,
"occurrences": 5,
"occurrences_watermark": 5,
"output_metric_format": "",
"output_metric_handlers": null,
"env_vars": null,
"metadata": {
"name": "lnms-interface-speed-reduced",
"namespace": "default",
"annotations": {
"location": "Somewhere",
"description": "Core Switch",
"acknowledged": "false",
"generated-by": "LibreNMS",
"librenms-rule-id": "59",
"librenms-device-id": "114"
}
}
},
"metadata": {
"namespace": "default"
}
}