Home
  •  

Flow: Source Template Status Monitor

Jalasoft.Xian.SmartManagementPacks.Flow.SourceTemplateStatus.1 (AggregateMonitor)

This monitor catches Xian events that notifies when the Source Template Status has changed its state.

Knowledge Base article:

Summary

Source template status has changed.

The flow analyzer source template status has changed from one of the following status to another: "Template added to Xian", "Template meets the required fields", "Template does not meet the required fields" or "Template removed from Xian".

Causes

Different states have the following characteristics: "Template meets the required fields" (when source template meets the minimum required fields). "Template does not meet the required fields" (when source template when source template meets the minimum required fields).

Resolutions

When the source template status is "Template does not meet the required fields". You must review the NetFlow configuration of your device make sure that the following fields are set up in the flow template - L4_DST_PORT - IPV4_SRC_ADDR - IPV4_DST_ADDR - (IN_BYTES, IN_PKTS) or (OUT_BYTES, OUT_PKTS)

Additional

Monitors the Source template status of a Flow template, helping to detect its arrival at any critical status like "Template does not meet the required fields".

Element properties:

TargetJalasoft.Xian.Common.Elements.ThirdParty.Flow.JsXFlowDeviceElement
Parent MonitorSystem.Health.PerformanceState
AlgorithmWorstOf
CategoryStateCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityLow
Alert Auto ResolveTrue
RemotableTrue
AccessibilityPublic
Alert Message
Source Template Status Alert
{0}

Source Code:

<AggregateMonitor ID="Jalasoft.Xian.SmartManagementPacks.Flow.SourceTemplateStatus.1" Accessibility="Public" Enabled="true" Target="ThirdParty_Flow!Jalasoft.Xian.Common.Elements.ThirdParty.Flow.JsXFlowDeviceElement" ParentMonitorID="SystemHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal">

  <Category>StateCollection</Category>

  <AlertSettings AlertMessage="SourceTemplateStatus_AlertMessage">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Low</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/Params/Param[3]$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <Algorithm>WorstOf</Algorithm>

</AggregateMonitor>