Cisco ASA: Incoming discarded packets Health Monitor

Jalasoft.Xian.SmartManagementPacks.CiscoASA.IncomingDiscardedPackets.1.1 (AggregateMonitor)

This monitor catches Xian events that notifies when the Incoming discarded packets if has changed its state.

Knowledge Base article:

Summary

Number of incoming discarded packets is over threshold.

The number of discarded incoming packets is above the maximum threshold configured in Xian Network Manager 2012.

Causes

The rate of incoming packets placed on the input queue may exceed the rate at which the interface can process them. Once the input queue becomes full, the interface drops additional incoming packets. The overflow scenario may occur due to outburst of packets or when a higher speed interface feeds packets to a lower speed interface.

Resolutions

If the current number of packets on the input queue is consistently at or greater than 80% of the current size of the input queue, it might require tuning to accommodate the incoming packet rate. If the discarded packets count increases at a higher rate, the size of the input queue may require tuning to accommodate the outburst.

Additional

Monitors the number of incoming packets discarded by an interface.

Element properties:

TargetJalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoASASnmpInterfaceElement
Parent MonitorSystem.Health.PerformanceState
AlgorithmWorstOf
CategoryStateCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityLow
Alert Auto ResolveTrue
RemotableTrue
AccessibilityPublic
Alert Message
Incoming discarded packets Alert
{0}

Source Code:

<AggregateMonitor ID="Jalasoft.Xian.SmartManagementPacks.CiscoASA.IncomingDiscardedPackets.1.1" Accessibility="Public" Enabled="true" Target="ThirdParty_Cisco!Jalasoft.Xian.Common.Elements.ThirdParty.Cisco.JsXCiscoASASnmpInterfaceElement" ParentMonitorID="SystemHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal">
<Category>StateCollection</Category>
<AlertSettings AlertMessage="IncomingDiscardedPackets_AlertMessage">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Low</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/Params/Param[3]$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<Algorithm>WorstOf</Algorithm>
</AggregateMonitor>