[ZBX-21283] Receiving Warning messages for 0/1 interface error (supposed to be >2 in 5 minutes) Created: 2022 Jun 30  Updated: 2023 Dec 22  Resolved: 2023 Dec 22

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Templates (T)
Affects Version/s: 6.0.6
Fix Version/s: None

Type: Incident report Priority: Trivial
Reporter: Rick Schmitz Assignee: Oleksii Zagorskyi
Resolution: Cannot Reproduce Votes: 0
Labels: actions, items, templates, triggers
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

Official latest Zabbix docker images. D-Link DGS-1250-52X, D-Link DGS-1250-28XMP switches.

Attachments: PNG File Zabbix 0 error - Warning.png     PNG File Zabbix 1 error - Warning.png    

 Description   

Steps to reproduce:

  1. D-Link DES_DGS Switch SNMP template, vanilla (no changes) 

Result:

Expected:
No emails for !>2 for 5m

 Comments   
Comment by Oleksii Zagorskyi [ 2022 Jul 04 ]

You are talking about official template "Interfaces SNMP" or "Interfaces Simple SNMP"
where we have trigger prototype, name:

Interface {#IFNAME}({#IFALIAS}): High error rate (>{$IF.ERRORS.WARN:"{#IFNAME}"} for 5m)

problem expression:

min(/Interfaces SNMP/net.if.in.errors[ifInErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"}
or min(/Interfaces SNMP/net.if.out.errors[ifOutErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"}

operational data:

errors in: {ITEM.LASTVALUE1}, errors out: {ITEM.LASTVALUE2}

macro {$IF.ERRORS.WARN} is defined on the template level with 2.

What is interesting, in your 2 alerts operational data is:
in: 0, out: 0
in: 0, out: 1
but I should note here that it uses macro {ITEM.LASTVALUE1} which (at a time of alert generation) might be not the same as {ITEM.VALUE1}, which originally caused the trigger Problem.

Check please history values 5 minutes before the Problems were generated, show it please.

Generated at Sun Apr 27 21:47:50 EEST 2025 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.