| 1 | # you can disable an alarm notification by setting the 'to' line to: silent |
| 2 | |
| 3 | # check for common /proc/net/softnet_stat errors |
| 4 | |
| 5 | alarm: 1min_netdev_backlog_exceeded |
| 6 | on: system.softnet_stat |
| 7 | class: Errors |
| 8 | type: System |
| 9 | component: Network |
| 10 | host labels: _os=linux |
| 11 | lookup: average -1m unaligned absolute of dropped |
| 12 | units: packets |
| 13 | every: 10s |
| 14 | warn: $this > (($status >= $WARNING) ? (0) : (10)) |
| 15 | delay: down 1h multiplier 1.5 max 2h |
| 16 | summary: System netdev dropped packets |
| 17 | info: Average number of dropped packets in the last minute \ |
| 18 | due to exceeded net.core.netdev_max_backlog |
| 19 | to: silent |
| 20 | |
| 21 | alarm: 1min_netdev_budget_ran_outs |
| 22 | on: system.softnet_stat |
| 23 | class: Errors |
| 24 | type: System |
| 25 | component: Network |
| 26 | host labels: _os=linux |
| 27 | lookup: average -1m unaligned absolute of squeezed |
| 28 | units: events |
| 29 | every: 10s |
| 30 | warn: $this > (($status >= $WARNING) ? (0) : (10)) |
| 31 | delay: down 1h multiplier 1.5 max 2h |
| 32 | summary: System netdev budget run outs |
| 33 | info: Average number of times ksoftirq ran out of sysctl net.core.netdev_budget or \ |
| 34 | net.core.netdev_budget_usecs with work remaining over the last minute \ |
| 35 | (this can be a cause for dropped packets) |
| 36 | to: silent |
| 37 | |
| 38 | alarm: 10min_netisr_backlog_exceeded |
| 39 | on: system.softnet_stat |
| 40 | class: Errors |
| 41 | type: System |
| 42 | component: Network |
| 43 | host labels: _os=freebsd |
| 44 | lookup: average -1m unaligned absolute of qdrops |
| 45 | units: packets |
| 46 | every: 10s |
| 47 | warn: $this > (($status >= $WARNING) ? (0) : (10)) |
| 48 | delay: down 1h multiplier 1.5 max 2h |
| 49 | summary: System netisr drops |
| 50 | info: Average number of drops in the last minute \ |
| 51 | due to exceeded sysctl net.route.netisr_maxqlen \ |
| 52 | (this can be a cause for dropped packets) |
| 53 | to: silent |