[ZBXNEXT-2632] Trigger active duration macro Created: 2014 Dec 05  Updated: 2019 May 24  Resolved: 2019 May 24

Status: Closed
Project: ZABBIX FEATURE REQUESTS
Component/s: Server (S)
Affects Version/s: 1.8.21, 2.2.7, 2.4.2
Fix Version/s: None

Type: Change Request Priority: Trivial
Reporter: Michael P Assignee: Unassigned
Resolution: Won't fix Votes: 0
Labels: macro, timeshift, trigger
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified


 Description   

It would be great if you could create a macro witch gives you the amount of time since the trigger has fired, to detect some kind of unusual behaviour.

As a Webhoster for example, to detect an unusual amount of packets, we created a trigger that measures the average amount of packets for 5 minutes and compare it to the average amout of pakets 30 minutes ago
avg(5m) > (avg(30m,5m) * 3)
to detect an unusual rise in the packet flof (possible DDoS)
What i would want to do is, to keep the trigger on, as long as possible, and not for a maximum of 30 minutes, as than the avg values would become similar again.
what i would want to do is place a macro in the 30m part with adds the value of minutes or seconds to the time-shift to keep track of the "sane" period of time everything was ok.

How does that idea sound?



 Comments   
Comment by Michael P [ 2019 May 24 ]

Even thou I'd still like this feature, I will close this request after 5 years....

Generated at Fri Mar 29 01:20:26 EET 2024 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.