I want netdata fping to alert only certains hosts #13357

cayenne17 · 2022-07-11T10:44:03Z

cayenne17
Jul 11, 2022

Hello,
I use netdata to monitor the network via fping.
I would like to be alerted only on certain hosts. The other hosts are only used for the graph.
In the configuration file /etc/netdata/health.d/fping.conf, I would like to know what is the purpose of the parameter: "families: *" ?

Here are the contents of the /etc/netdata/health.d/fping.conf file currently:


 template: fping_last_collected_secs
 families: *
       on: fping.latency
    class: Latency
     type: Other
component: Network
     calc: $now - $last_collected_t
    units: seconds ago
    every: 10s
     warn: $this > (($status >= $WARNING)  ? ($update_every) : ( 5 * $update_every))
     crit: $this > (($status == $CRITICAL) ? ($update_every) : (60 * $update_every))
    delay: down 5m multiplier 1.5 max 1h
     info: number of seconds since the last successful data collection
       to: sysadmin

 template: fping_host_reachable
 families: *
       on: fping.latency
    class: Errors
     type: Other
	 component: Network
     calc: $average != nan
    units: up/down
    every: 10s
     crit: $this == 0
    delay: down 30m multiplier 1.5 max 2h
     info: reachability status of the network host (0: unreachable, 1: reachable)
       to: sysadmin

 template: fping_host_latency
 families: *
       on: fping.latency
    class: Latency
     type: Other
component: Network
   lookup: average -10s unaligned of average
    units: ms
    every: 10s
    green: 500
      red: 1000
     warn: $this > $green OR $max > $red
     crit: $this > $red
    delay: down 30m multiplier 1.5 max 2h
     info: average latency to the network host over the last 10 seconds
       to: sysadmin

 template: fping_packet_loss
 families: *
       on: fping.quality
    class: Errors
     type: System
component: Network
   lookup: average -10m unaligned of returned
     calc: 100 - $this
    green: 1
      red: 10
    units: %
    every: 10s
     warn: $this > $green
     crit: $this > $red
    delay: down 30m multiplier 1.5 max 2h
     info: packet loss ratio to the network host over the last 10 minutes
       to: sysadmin

Answered by ilyam8

Jul 11, 2022

@cayenne17, hi 👋

I would like to know what is the purpose of the parameter: "families: *"?

You are right, using families will work.

copy the hosts value to families.
remove hosts.

View full answer

thiagoftsm · 2022-07-11T13:14:19Z

thiagoftsm
Jul 11, 2022
Collaborator

Hello @cayenne17 ,

What you are needing in your alerts/alarms is to define the hosts that are target, please, take a look for more details in this link.

If you are using parent/child configuration, you need to write this specific alert on parent, and you can use simple pattern to define the hosts that are target.

You can see all hosts that are connected to a specific parent accessing our API trough the link http://localhost:19999/api/v1/info.

Finally, an example, let us suppose that your network have hosts with pattern hostYYY where YYY are numbers, and we want apply alerts for host000, host001 and exclude host002, you can add the following line to your alerts to cover this:

hosts: host000 host001 !host002

Best regards!

1 reply

cayenne17 Jul 11, 2022
Author

Bonjour @cayenne17 ,

Ce dont vous avez besoin dans vos alertes/alarmes, c'est de définir hostsqui sont ciblés, veuillez consulter ce lien pour plus de détails.

Si vous utilisez la configuration parent/enfant, vous devez écrire cette alerte spécifique sur parent, et vous pouvez utiliser un modèle simple pour définir les hôtes ciblés.

Vous pouvez voir tous les hôtes connectés à un parent spécifique accédant à notre API via le lien http://localhost:19999/api/v1/info .

Enfin, un exemple, supposons que votre réseau ait des hôtes avec le modèle hostYYYoù YYYsont des nombres, et nous voulons appliquer des alertes pour host000, host001et exclure host002, vous pouvez ajouter la ligne suivante à vos alertes pour couvrir cela :
hosts: host000 host001 !host002
Meilleures salutations!

Hello @thiagoftsm,
I just tried to add:
hosts: 0.00* 00* 01* ipv4.srv1.mydomain.fr ipv6.srv1.mydomain.fr ipv6.nro--sw-optique-fouras-17168Z00.netdata.local fbx-sreb.ipv6.nro--sw-optique-fouras-17168Z00.netdata.local ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv4.dslam-jzl86-1.netdata.local ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv6.dslam-9vu79-1.netdata.local

I no longer receive alerts about fping :

The content of file configuration 'etc/netdata/health.d/fping.conf' is :

 template: fping_last_collected_secs
 families: *
       on: fping.latency
    class: Latency
     type: Other
component: Network
     calc: $now - $last_collected_t
    units: seconds ago
    every: 10s
     warn: $this > (($status >= $WARNING)  ? ($update_every) : ( 5 * $update_every))
     crit: $this > (($status == $CRITICAL) ? ($update_every) : (60 * $update_every))
    delay: down 5m multiplier 1.5 max 1h
     info: number of seconds since the last successful data collection
       to: sysadm
    hosts: 0.00* 00* 01* ipv4.srv1.mydomain.fr ipv6.srv1.mydomain.fr ipv6.nro--sw-optique-fouras-17168Z00.netdata.local fbx-sreb.ipv6.nro--sw-optique-fouras-17168Z00.netdata.local ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv4.dslam-jzl86-1.netdata.local ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv6.dslam-9vu79-1.netdata.localin

 template: fping_host_reachable
 families: *
       on: fping.latency
    class: Errors
     type: Other
component: Network
     calc: $average != nan
    units: up/down
    every: 10s
     crit: $this == 0
    delay: down 30m multiplier 1.5 max 2h
     info: reachability status of the network host (0: unreachable, 1: reachable)
       to: sysadmin
    hosts: 0.00* 00* 01* ipv4.srv1.mydomain.fr ipv6.srv1.mydomain.fr ipv6.nro--sw-optique-fouras-17168Z00.netdata.local fbx-sreb.ipv6.nro--sw-optique-fouras-17168Z00.netdata.local ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv4.dslam-jzl86-1.netdata.local ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv6.dslam-9vu79-1.netdata.local

 template: fping_host_latency
 families: *
       on: fping.latency
    class: Latency
     type: Other
component: Network
   lookup: average -10s unaligned of average
    units: ms
    every: 10s
    green: 500
      red: 1000
     warn: $this > $green OR $max > $red
     crit: $this > $red
    delay: down 30m multiplier 1.5 max 2h
     info: average latency to the network host over the last 10 seconds
       to: sysadmin
    hosts: 0.00* 00* 01* ipv4.srv1.mydomain.fr ipv6.srv1.mydomain.fr ipv6.nro--sw-optique-fouras-17168Z00.netdata.local fbx-sreb.ipv6.nro--sw-optique-fouras-17168Z00.netdata.local ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv4.dslam-jzl86-1.netdata.local ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv6.dslam-9vu79-1.netdata.local

 template: fping_packet_loss
 families: *
       on: fping.quality
    class: Errors
     type: System
component: Network
   lookup: average -10m unaligned of returned
     calc: 100 - $this
    green: 1
      red: 10
    units: %
    every: 10s
     warn: $this > $green
     crit: $this > $red
    delay: down 30m multiplier 1.5 max 2h
     info: packet loss ratio to the network host over the last 10 minutes
       to: sysadmin
    hosts: 0.00* 00* 01* ipv4.srv1.mydomain.fr ipv6.srv1.mydomain.fr ipv6.nro--sw-optique-fouras-17168Z00.netdata.local fbx-sreb.ipv6.nro--sw-optique-fouras-17168Z00.netdata.local ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv4.dslam-jzl86-1.netdata.local ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv6.dslam-9vu79-1.netdata.local

ilyam8 · 2022-07-11T15:27:09Z

ilyam8
Jul 11, 2022
Collaborator

@cayenne17, hi 👋

I would like to know what is the purpose of the parameter: "families: *"?

You are right, using families will work.

copy the hosts value to families.
remove hosts.

3 replies

cayenne17 Jul 11, 2022
Author

@cayenne17, salut 👋

J'aimerais savoir à quoi sert le paramètre : "familles : *" ?

Vous avez raison, utiliser des familles fonctionnera.

copier le hostsvaleur à families.

retirer hosts.

Hello @ilyam8,

I just did as you said and I still get alerts of domains that are not in the list families.

Here are the contents:


 template: fping_last_collected_secs
 families: 0.00* 00* 01* ipv4.srv1.exemple.fr ipv6.srv1.exemple.fr ipv6.nro--sw-optique-fouras-17168Z00.netdata.local fbx-sreb.ipv6.nro--sw-optique-fouras-17168Z00.netdata.local ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv4.dslam-jzl86-1.netdata.local ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv6.dslam-9vu79-1.netdata.localin
       on: fping.latency
    class: Latency
     type: Other
component: Network
     calc: $now - $last_collected_t
    units: seconds ago
    every: 10s
     warn: $this > (($status >= $WARNING)  ? ($update_every) : ( 5 * $update_every))
     crit: $this > (($status == $CRITICAL) ? ($update_every) : (60 * $update_every))
    delay: down 5m multiplier 1.5 max 1h
     info: number of seconds since the last successful data collection
       to: sysadm

 template: fping_host_reachable
 families: 0.00* 00* 01* ipv4.srv1.exemple.fr ipv6.srv1.exemple.fr ipv6.nro--sw-optique-fouras-17168Z00.netdata.local fbx-sreb.ipv6.nro--sw-optique-fouras-17168Z00.netdata.local ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv4.dslam-jzl86-1.netdata.local ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv6.dslam-9vu79-1.netdata.local
       on: fping.latency
    class: Errors
     type: Other
component: Network
     calc: $average != nan
    units: up/down
    every: 10s
     crit: $this == 0
    delay: down 30m multiplier 1.5 max 2h
     info: reachability status of the network host (0: unreachable, 1: reachable)
       to: sysadmin

 template: fping_host_latency
 families: 0.00* 00* 01* ipv4.srv1.exemple.fr ipv6.srv1.exemple.fr ipv6.nro--sw-optique-fouras-17168Z00.netdata.local fbx-sreb.ipv6.nro--sw-optique-fouras-17168Z00.netdata.local ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv4.dslam-jzl86-1.netdata.local ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv6.dslam-9vu79-1.netdata.local
       on: fping.latency
    class: Latency
     type: Other
component: Network
   lookup: average -10s unaligned of average
    units: ms
    every: 10s
    green: 500
      red: 1000
     warn: $this > $green OR $max > $red
     crit: $this > $red
    delay: down 30m multiplier 1.5 max 2h
     info: average latency to the network host over the last 10 seconds
       to: sysadmin

 template: fping_packet_loss
 families: 0.00* 00* 01* ipv4.srv1.exemple.fr ipv6.srv1.exemple.fr ipv6.nro--sw-optique-fouras-17168Z00.netdata.local fbx-sreb.ipv6.nro--sw-optique-fouras-17168Z00.netdata.local ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv4.dslam-jzl86-1.netdata.local ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv6.dslam-9vu79-1.netdata.local
       on: fping.quality
    class: Errors
     type: System
component: Network
   lookup: average -10m unaligned of returned
     calc: 100 - $this
    green: 1
      red: 10
    units: %
    every: 10s
     warn: $this > $green
     crit: $this > $red
    delay: down 30m multiplier 1.5 max 2h
     info: packet loss ratio to the network host over the last 10 minutes
       to: sysadmin

Here are some of the latest errors in /var/log/netdata/error.log :

2022-07-11 18:39:11: alarm-notify.sh: FATAL: All notification methods are disabled. Not sending notification for host 'netdata', chart 'fping.005_3040_xdsl_2_PER87_87c_ipv6_netdata_local_latency' to 'sysadmin' for 'fping_host_reachable' = '0' for status 'CRITICAL'.
2022-07-11 18:50:51: alarm-notify.sh: FATAL: All notification methods are disabled. Not sending notification for host 'netdata', chart 'fping.005_3122_abo_xdsl_1_YXB23_23c_ipv6_netdata_local_quality' to 'sysadmin' for 'fping_packet_loss' = '1' for status 'CLEAR'.
2022-07-11 19:09:21: alarm-notify.sh: FATAL: All notification methods are disabled. Not sending notification for host 'netdata', chart 'fping.005_3040_xdsl_2_PER87_87c_ipv6_netdata_local_latency' to 'sysadmin' for 'fping_host_reachable' = '1' for status 'CLEAR'.
2022-07-11 19:16:53: tc-qos-helper.sh: WARNING: FireQOS is not installed on this system. Use FireQOS to apply traffic QoS and expose the class names to netdata. Check https://github.com/netdata/netdata/tree/master/collectors/tc.plugin#tcplugin
2022-07-11 19:16:53: tc-qos-helper.sh: WARNING: Cannot find file '/usr/lib/netdata/conf.d/tc-qos-helper.conf'.
2022-07-11 19:16:53: tc-qos-helper.sh: WARNING: Cannot find file '/etc/netdata/tc-qos-helper.conf'.
2022-07-11 20:01:01: alarm-notify.sh: FATAL: All notification methods are disabled. Not sending notification for host 'netdata', chart 'fping.005_3121_abo_xdsl_1_YXB23_23c_ipv6_netdata_local_quality' to 'sysadmin' for 'fping_packet_loss' = '1' for status 'WARNING'.
2022-07-11 20:16:55: tc-qos-helper.sh: WARNING: FireQOS is not installed on this system. Use FireQOS to apply traffic QoS and expose the class names to netdata. Check https://github.com/netdata/netdata/tree/master/collectors/tc.plugin#tcplugin
2022-07-11 20:16:55: tc-qos-helper.sh: WARNING: Cannot find file '/usr/lib/netdata/conf.d/tc-qos-helper.conf'.
2022-07-11 20:16:55: tc-qos-helper.sh: WARNING: Cannot find file '/etc/netdata/tc-qos-helper.conf'.
2022-07-11 20:49:01: alarm-notify.sh: FATAL: All notification methods are disabled. Not sending notification for host 'netdata', chart 'fping.005_3121_abo_xdsl_1_YXB23_23c_ipv6_netdata_local_quality' to 'sysadmin' for 'fping_packet_loss' = '1' for status 'CLEAR'.
2022-07-11 21:04:51: alarm-notify.sh: FATAL: All notification methods are disabled. Not sending notification for host 'netdata', chart 'fping.005_3111_abo_xdsl_1_PFY87_87c_ipv6_netdata_local_quality' to 'sysadmin' for 'fping_packet_loss' = '1' for status 'WARNING'.
2022-07-11 21:16:57: tc-qos-helper.sh: WARNING: FireQOS is not installed on this system. Use FireQOS to apply traffic QoS and expose the class names to netdata. Check https://github.com/netdata/netdata/tree/master/collectors/tc.plugin#tcplugin
2022-07-11 21:16:57: tc-qos-helper.sh: WARNING: Cannot find file '/usr/lib/netdata/conf.d/tc-qos-helper.conf'.
2022-07-11 21:16:57: tc-qos-helper.sh: WARNING: Cannot find file '/etc/netdata/tc-qos-helper.conf'.
2022-07-11 21:28:51: alarm-notify.sh: FATAL: All notification methods are disabled. Not sending notification for host 'netdata', chart 'fping.005_3122_abo_xdsl_1_YXB23_23c_ipv6_netdata_local_quality' to 'sysadmin' for 'fping_packet_loss' = '1' for status 'WARNING'.
2022-07-11 21:39:52: alarm-notify.sh: FATAL: All notification methods are disabled. Not sending notification for host 'netdata', chart 'fping.005_3111_abo_xdsl_1_PFY87_87c_ipv6_netdata_local_quality' to 'sysadmin' for 'fping_packet_loss' = '1' for status 'CLEAR'.
2022-07-11 22:07:42: alarm-notify.sh: FATAL: All notification methods are disabled. Not sending notification for host 'netdata', chart 'fping.005_3122_abo_xdsl_1_YXB23_23c_ipv6_netdata_local_quality' to 'sysadmin' for 'fping_packet_loss' = '1' for status 'CLEAR'.

fping.005_3122_abo_xdsl_1_YXB23_23c_ipv6_netdata_local_quality corresponds to 005.3122.abo.xdsl.1.YXB23.23c.ipv6.netdata.local

Normally, it should not attempt to send a notification

ilyam8 Jul 11, 2022
Collaborator

I still get alerts of domains that are not in the list families

Can you give an example of those domains?

the families pattern matches 005.3122.abo.xdsl.1.YXB23.23c.ipv6.netdata.local domain (00* part)

cayenne17 Jul 11, 2022
Author

Tank you, well seen, I have just corrected and put "00.*" instead.
to follow

cayenne17 · 2022-07-12T08:12:09Z

cayenne17
Jul 12, 2022
Author

Hello,
it's ok, it works. i managed to filter the notifications by fping hosts.

It is well in the field "families".
In fact, you have to replace the dots by underscores and the dashes by underscores in the domain names.
example : www.google.com->www_google_com

in my example, you should not put :
families: 0.00* 00.* 01* ipv4.srv1.exemple.fr ipv6.srv1.exemple.fr ipv6.nro--sw-optique-fouras-17168Z00.netdata.local fbx-sreb.ipv6.nro--sw-optique-fouras-17168Z00.netdata.local ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv6.dslam-jzl86-1.netdata.local fbx-spin.ipv4.dslam-jzl86-1.netdata.local ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv4.dslam-9vu79-1.netdata.local fbx-brunos.ipv6.dslam-9vu79-1.netdata.local

but you have to put :
families: 0_00* 00_* 01* ipv4_srv1_exemple_fr ipv6_srv1_exemple_fr ipv6_nro__sw_optique_fouras_17168Z00_netdata_local fbx_sreb_ipv6_nro__sw_optique_fouras_17168Z00_netdata_local ipv6_dslam_jzl86_1_netdata_local fbx_spin_ipv6_dslam_jzl86_1_netdata_local fbx_spin_ipv4_dslam_jzl86_1_netdata_local ipv4_dslam_9vu79_1_netdata_local fbx_brunos_ipv4_dslam_9vu79_1_netdata_local fbx_brunos_ipv6_dslam_9vu79_1_netdata_local

5 replies

ilyam8 Jul 12, 2022
Collaborator

What fping version are you using? The problem with replacing dots with underscored in families has been fixed since v5.1.

cayenne17 Jul 12, 2022
Author

# fping -v
fping: Version 5.0

I don't know how I installed it, it's netdata that managed it I think.
I don't know how to update it.

PS: I had followed https://learn.netdata.cloud/docs/agent/collectors/fping.plugin

cayenne17 Jul 12, 2022
Author

I just did the command /usr/libexec/netdata/plugins.d/fping.plugin install to update fping.
I restarted the netdata service
I tested and I was not receiving many notifications.

I just put back the domain names without replacing dots by underscores and without replacing dashes by underscores.
Now I receive notifications again

PS : I am in version 5.1 of fping :

# fping -v
fping: Version 5.1

ilyam8 Jul 12, 2022
Collaborator

Check the fping charts family on the dashboard. If you see dots - use dots in the families pattern. Otherwise - don't.

cayenne17 Jul 12, 2022
Author

Check the fping charts family on the dashboard. If you see dots - use dots in the families pattern. Otherwise - don't.

Here's what it looks like:

The families column is made up of "." and "-".

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

I want netdata fping to alert only certains hosts #13357

{{title}}

Replies: 3 comments 9 replies

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

Select a reply

I want netdata fping to alert only certains hosts #13357

cayenne17 Jul 11, 2022

Replies: 3 comments · 9 replies

thiagoftsm Jul 11, 2022 Collaborator

cayenne17 Jul 11, 2022 Author

ilyam8 Jul 11, 2022 Collaborator

cayenne17 Jul 11, 2022 Author

ilyam8 Jul 11, 2022 Collaborator

cayenne17 Jul 11, 2022 Author

cayenne17 Jul 12, 2022 Author

ilyam8 Jul 12, 2022 Collaborator

cayenne17 Jul 12, 2022 Author

cayenne17 Jul 12, 2022 Author

ilyam8 Jul 12, 2022 Collaborator

cayenne17 Jul 12, 2022 Author

cayenne17
Jul 11, 2022

Replies: 3 comments 9 replies

thiagoftsm
Jul 11, 2022
Collaborator

cayenne17 Jul 11, 2022
Author

ilyam8
Jul 11, 2022
Collaborator

cayenne17 Jul 11, 2022
Author

ilyam8 Jul 11, 2022
Collaborator

cayenne17 Jul 11, 2022
Author

cayenne17
Jul 12, 2022
Author

ilyam8 Jul 12, 2022
Collaborator

cayenne17 Jul 12, 2022
Author

cayenne17 Jul 12, 2022
Author

ilyam8 Jul 12, 2022
Collaborator

cayenne17 Jul 12, 2022
Author