Hello,
we are using Airwave 8.2.12.0 with an external syslog server, which gets notified by false positive alerts frequently. When such an event happens, we see that multiple VCs and sometimes switches are shown as down in the alert view, even if they are up and running without any problems.
We already adjusted following SNMP poll values:
- Per Group: Missed SNMP Poll Threshold to 10
- Airwave SNMP settings: SNMP timeout to 60 sec and SNMP retries to 40 (both maximum values)
- Trigger: Notify if device is down longer than 5 minutes
Still, we get the false positives multiple times per week. Our guess is, that the 5 minute threshold set in the trigger does not count for external syslog messages. When we check the airwave it shows that all devices are online, but we can see the alerts generated by airwave at the top header.
Does someone have an idea how we can solve this? Thanks a lot.
------------------------------
Kelvin Celsius
------------------------------