| 1 | # you can disable an alarm notification by setting the 'to' line to: silent |
| 2 | |
| 3 | # ----------------------------------------------------------------------------- |
| 4 | # tcp resets this host sends |
| 5 | |
| 6 | alarm: 1m_ip_tcp_resets_sent |
| 7 | on: ip.tcphandshake |
| 8 | class: Errors |
| 9 | type: System |
| 10 | component: Network |
| 11 | host labels: _os=linux |
| 12 | lookup: average -1m at -10s unaligned absolute of OutRsts |
| 13 | units: tcp resets/s |
| 14 | every: 10s |
| 15 | info: average number of sent TCP RESETS over the last minute |
| 16 | |
| 17 | alarm: 10s_ip_tcp_resets_sent |
| 18 | on: ip.tcphandshake |
| 19 | class: Errors |
| 20 | type: System |
| 21 | component: Network |
| 22 | host labels: _os=linux |
| 23 | lookup: average -10s unaligned absolute of OutRsts |
| 24 | units: tcp resets/s |
| 25 | every: 10s |
| 26 | warn: $netdata.uptime.uptime > (1 * 60) AND $this > ((($1m_ip_tcp_resets_sent < 5)?(5):($1m_ip_tcp_resets_sent)) * (($status >= $WARNING) ? (1) : (10))) |
| 27 | delay: up 20s down 60m multiplier 1.2 max 2h |
| 28 | options: no-clear-notification |
| 29 | summary: System TCP outbound resets |
| 30 | info: Average number of sent TCP RESETS over the last 10 seconds. \ |
| 31 | This can indicate a port scan, \ |
| 32 | or that a service running on this host has crashed. \ |
| 33 | Netdata will not send a clear notification for this alarm. |
| 34 | to: silent |
| 35 | |
| 36 | # ----------------------------------------------------------------------------- |
| 37 | # tcp resets this host receives |
| 38 | |
| 39 | alarm: 1m_ip_tcp_resets_received |
| 40 | on: ip.tcphandshake |
| 41 | class: Errors |
| 42 | type: System |
| 43 | component: Network |
| 44 | host labels: _os=linux freebsd |
| 45 | lookup: average -1m at -10s unaligned absolute of AttemptFails |
| 46 | units: tcp resets/s |
| 47 | every: 10s |
| 48 | info: average number of received TCP RESETS over the last minute |
| 49 | |
| 50 | alarm: 10s_ip_tcp_resets_received |
| 51 | on: ip.tcphandshake |
| 52 | class: Errors |
| 53 | type: System |
| 54 | component: Network |
| 55 | host labels: _os=linux freebsd |
| 56 | lookup: average -10s unaligned absolute of AttemptFails |
| 57 | units: tcp resets/s |
| 58 | every: 10s |
| 59 | warn: $netdata.uptime.uptime > (1 * 60) AND $this > ((($1m_ip_tcp_resets_received < 5)?(5):($1m_ip_tcp_resets_received)) * (($status >= $WARNING) ? (1) : (10))) |
| 60 | delay: up 20s down 60m multiplier 1.2 max 2h |
| 61 | options: no-clear-notification |
| 62 | summary: System TCP inbound resets |
| 63 | info: average number of received TCP RESETS over the last 10 seconds. \ |
| 64 | This can be an indication that a service this host needs has crashed. \ |
| 65 | Netdata will not send a clear notification for this alarm. |
| 66 | to: silent |