Switch Alerts

Following are the switch alerts that you can configure for notification over Webhooks. Click on an alert to see its description and JSON payload:

New Switch Connected

Generates an alert when a new switch is connected.

{
 	"id": "AXdpfWeFo68tULajSfwu",
 	"nid": 201,
 	"alert_type": "New Switch Connected",
 	"setting_id": "ggsswerr90254beccccaaazza05f17-201",
 	"device_id": "CNXXYYZZAA",
 	"description": "New Switch with serial CNXXYYZZAA, MAC address 55:88:aa:bb:dd:cc IP address 10.21.20.231 and Hostname Aruba-2930F-24G-PoEP-4SFPP connected, Group:unprovisioned, Site:Bangalore Site",
 	"state": "Open",
 	"severity": "Major",
 	"operation": "create",
 	"timestamp": 1612382562,
 	"details": {
 		"group": "1",
 		"labels": "46",
 		"_rule_number": "0",
 		"params": [
 			"CNXXYYZZAA",
 			"55:88:aa:bb:dd:cc",
 			"10.10.10.10",
 			"Aruba-2930F-24G-PoEP-4SFPP"
 		],
 		"serial": "CNXXYYZZAA",
 		"time": "2021-02-03 20:02:42 UTC",
 		"group_name": "unprovisioned",
 		"site_name": "Bangalore Site"
 	},
 	"webhook": "8077a55e-f8d3-43af-a67f-12263f5b778e",
 	"text": "New Switch with serial CNXXYYZZAA, MAC address 55:88:aa:bb:dd:cc IP address 10.10.10.10 and Hostname Aruba-2930F-24G-PoEP-4SFPP connected, Group:unprovisioned, Site:Bangalore Site"
 }

Switch Disconnected

Generates an alert when a switch is disconnected. This alert is enabled by default and the alert severity is Major. In the Duration field, enter the duration during which the condition persists. The alert must be generated if the condition persists even after this duration. The default value is 10 minutes.

{
	"id": "AXyzbcapqrstn24BIWcc",
	"nid": 203,
	"alert_type": "Switch Disconnected",
	"setting_id": "ggsswerr90254beccccaaazza05f17-203",
	"device_id": "CNXXYYZZAA",
	"description": "Switch with serial CNXXYYZZAA, MAC address 55:88:aa:bb:dd:cc IP address 10.10.10.10 and Hostname Aruba-2930F-24G-PoEP-4SFPP reconnected",
	"state": "Close",
	"severity": "Major",
	"operation": "update",
	"timestamp": 1612383547,
	"details": {
		"params": [
			"CNXXYYZZAA",
			"55:88:aa:bb:dd:cc",
			"10.10.10.10",
			"Aruba-2930F-24G-PoEP-4SFPP",
			"",
			""
		],
		"serial": "CNXXYYZZAA",
		"time": "2021-01-08 10:31:07 UTC",
		"conn_status": "reconnected"
	},
	"webhook": "8077a55e-f8d3-43af-a67f-12263f5b778e",
	"text": "Switch with serial CNXXYYZZAA, MAC address 55:88:aa:bb:dd:cc IP address 10.10.10.10 and Hostname Aruba-2930F-24G-PoEP-4SFPP reconnected"
}

Switch Mismatch Config

Generates an alert when there is a mismatch in switch configuration.

{
    "alert_type": "SWITCH_CONFIG_MISMATCH",
    "description": "Config mismatch occurred in switch with serial CNXXYYZZAA MAC address 55:88:aa:bb:dd:cc and IP address 10.10.10.10 and Hostname Aruba - 2930 F - 48 G - PoEP - 4 SFPP ",
    "timestamp": 1569505920,
    "webhook": "4d588353-3355-487d-81af-c97f62b0abb0",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1307",
    "state": "Open",
    "nid": 206,
    "details": {
        "group": "0",
        "name": "Aruba-2930F-24G-PoEP-4SFPP",
        "ip": "10.10.10.10",
        "labels": [],
        "mac": "55:88:aa:bb:dd:cc",
        "time": "2019-09-26 13:52:00 UTC",
        "threshold": "1",
        "serial": "CNXXYYZZAA"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "id": "AXyzbcapqrstn24BIWcc",
    "severity": "Critical"
}

Switch CPU Utilization

Generates an alert when the switch CPU utilization exceeds the threshold value. In the Duration field, enter the duration after which the alert must be generated. You can add additional rule(s) for this alert.

{
    "id": "AXyzbcapqrstn24BIWcc",
    "alert_type": "SWITCH_CPU_OVER_UTILIZATION",
    "description": "CPU utilization for Switch Aruba-2930F-48G-PoEP-4SFPP with serial CNXXYYZZAA has been above 5% for about 5 minutes since 2019 - 09 - 26 06: 07: 00 UTC.",
    "timestamp": 1569478320,
    "webhook": "f8b021a2-8127-4c28-a755-8ee6e01ada66",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1300",
    "state": "Open",
    "nid": 1300,
    "details": {
        "_rule_number": "0",
        "group": "41",
        "name": "Aruba-2930F-48G-PoEP-4SFPP",
        "duration": "5",
        "time": "2019-09-26 06:07:00 UTC",
        "threshold": "5",
        "ds_key": "ggsswerr90254beccccaaazza05f17.CNXXYYZZAA.cpu_utilization.5m",
        "serial": "CNXXYYZZAA",
        "unit": "%"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "severity": "Critical"
}

Switch Memory Utilization

Generates an alert when the switch memory utilization exceeds the threshold value. In the Duration field, enter the duration after which the alert must be generated. You can add additional rule(s) for this alert.

{
  "id": "AXyzbcapqrstn24BIWcc",
  "nid": 1301,
  "alert_type": "SWITCH_MEMORY_OVER_UTILIZATION",
  "setting_id": "ggsswerr90254beccccaaazza05f17-1301",
  "device_id": "CNXXYYZZAA",
  "description": "Memory utilization for Switch  with serial CNXXYYZZAA has been above 1% for about 5 minutes since 2021-02-04 07:30:00 UTC",
  "state": "Open",
  "severity": "Critical",
  "operation": "create",
  "timestamp": 1612424100,
  "details": {
    "name": "",
    "unit": "%",
    "serial": "CNXXYYZZAA",
    "group": "212",
    "_rule_number": "0",
    "ds_key": "ggsswerr90254beccccaaazza05f17.CNXXYYZZAA.memory_utilization.5m",
    "duration": "5",
    "threshold": "1",
    "time": "2021-02-04 07:30:00 UTC"
  },
  "webhook": "8077a55e-f8d3-43af-a67f-12263f5b778e",
  "text": "Memory utilization for Switch  with serial CNXXYYZZAA has been above 1% for about 5 minutes since 2021-02-04 07:30:00 UTC"
}

Switch Port Tx Rate

In the Transform Function drop-down, select either absolute or percentage. Select absolute to generate an alert if the data transmission rate of the port (in terms of Mbps) exceeds the threshold value. Select percentage to generate an alert if the data transmission rate of the port (in terms of utilization as a percentage of total bandwidth available) exceeds the threshold value. In the Interface field, enter the interface name. You can add additional rule(s) for this alert.

{
    "alert_type": "SWITCH_INTERFACE_TX_RATE",
    "description": "Transfer rate for Interface 19 on Switch Aruba-2930F-24G-PoEP-4SFPP has been above 1 % for about 5 minutes since 2019-09-26 13:18:00 UTC.",
    "timestamp": 1569504180,
    "webhook": "4d588353-3355-487d-81af-c97f62b0abb0",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1302",
    "state": "Open",
    "nid": 1302,
    "details": {
        "_rule_number": "0",
        "group": "1",
        "name": "Aruba-2930F-24G-PoEP-4SFPP",
        "max_value_for_percentage": "1000.0",
        "threshold": "1",
        "intf_name": "19",
        "time": "2019-09-26 13:18:00 UTC",
        "duration": "5",
        "ds_key": "ggsswerr90254beccccaaazza05f17.CNXXYYZZAA.intf.tx_utilization.5m",
        "serial": "CNXXYYZZAA",
        "unit": "%"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "id": "AXyzbcapqrstn24BIWcc",
    "severity": "Critical"
}

Switch Port Rx Rate

In the Transform Function drop-down, select either absolute or percentage. Select absolute to generate an alert if the data reception rate of the port (in terms of Mbps) exceeds the threshold value. Select percentage to generate an alert if the data reception rate of the port (in terms of utilization as a percentage of total bandwidth available) exceeds the threshold value. In the Interface field, enter the interface name. You can add additional rule(s) for this alert.

{
    "alert_type": "SWITCH_INTERFACE_RX_RATE",
    "description": "Receive rate for Interface 15 on Switch Aruba-2930F-24G-PoEP-4SFPP has been above 1 % for about 5 minutes since 2019-09-26 13:18:00 UTC.",
    "timestamp": 1569504180,
    "webhook": "4d588353-3355-487d-81af-c97f62b0abb0",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1303",
    "state": "Open",
    "nid": 1303,
    "details": {
        "_rule_number": "0",
        "group": "1",
        "name": "Aruba-2930F-24G-PoEP-4SFPP",
        "max_value_for_percentage": "1000.0",
        "threshold": "1",
        "intf_name": "15",
        "time": "2019-09-26 13:18:00 UTC",
        "duration": "5",
        "ds_key": "ggsswerr90254beccccaaazza05f17.CNXXYYZZAA.intf.rx_utilization.5m",
        "serial": "CNXXYYZZAA",
        "unit": "%"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "id": "AXyzbcapqrstn24BIWcc",
    "severity": "Critical"
}

Switch Port Duplex Mode

Generates an alert when the port is operating in half-duplex mode. In the Interface field, enter the interface name.

{
  "alert_type": "SWITCH_INTERFACE_DUPLEX_MODE",
  "description": "Interface 19 on switch Aruba-2930F-24G-PoEP-4SFPP with serial CNXXYYZZAA is operating at Half-Duplex mode",
  "timestamp": 1569901561,
  "webhook": "c71404f4-00c1-4241-8bf4-c8d3f981caa2",
  "setting_id": "ggsswerr90254beccccaaazza05f17-1306",
  "state": "Open",
  "nid": 1306,
  "details": {
    "group": "1",
    "name": "Aruba-2930F-24G-PoEP-4SFPP",
    "labels": "",
    "mode": "Half",
    "intf_name": "19",
    "time": "2019-10-01 03:46:01 UTC",
    "serial": "CNXXYYZZAA"
  },
  "operation": "create",
  "device_id": "CNXXYYZZAA",
  "id": "AW2FbMiOYu0OgJ2asaWh",
  "severity": "Critical"
}

Switch Port Input Errors

Generates an alert when the percentage of input errors on the port exceeds the threshold value. In the Interface field, enter the interface name. You can add additional rule(s) for this alert.

{
    "alert_type": "SWITCH_INTERFACE_INPUT_ERRORS",
    "description": "Input errors for Interface 19 on Switch Aruba-2930F-24G-PoEP-4SFPP has been above 90% for about 30 minutes since 2019-09-26 06:07:00 UTC .",
    "timestamp": 1569505920,
    "webhook": "4d588353-3355-487d-81af-c97f62b0abb0",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1307",
    "state": "Open",
    "nid": 1304,
    "details": {
        "group": "0",
        "name": "Aruba-2930F-24G-PoEP-4SFPP",
        "ip": "10.10.10.10",
        "labels": [],
        "mac": "e0:07:1b:c4:8d:80",
        "time": "2019-09-26 13:52:00 UTC",
        "threshold": "1",
        "serial": "CNXXYYZZAA"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "id": "AXyzbcapqrstn24BIWcc",
    "severity": "Critical"
}

Switch Port Output Errors

Generates an alert when the percentage of output errors on the port exceeds the threshold value. In the Interface field, enter the interface name. You can add additional rule(s) for this alert.

{
    "alert_type": "SWITCH_INTERFACE_OUTPUT_ERRORS",
    "description": "Output errors for Interface 19 on Switch Aruba-2930F-24G-PoEP-4SFPP has been above 90% for about 30 minutes since 2019-09-26 06:07:00 UTC. ",
    "timestamp": 1569505920,
    "webhook": "4d588353-3355-487d-81af-c97f62b0abb0",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1307",
    "state": "Open",
    "nid": 1305,
    "details": {
        "group": "0",
        "name": "Aruba-2930F-24G-PoEP-4SFPP",
        "ip": "10.10.10.10",
        "labels": [],
        "mac": "e0:07:1b:c4:8d:80",
        "time": "2019-09-26 13:52:00 UTC",
        "threshold": "1",
        "serial": "CNXXYYZZAA"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "id": "AXyzbcapqrstn24BIWcc",
    "severity": "Critical"
}

Switch Hardware Failure

Switch Hardware Failure—Generates an alert when the switch hardware fails. The following are the typical hardware failures for Aruba and MAS switches:

Aruba switches

Fan failure
Power supply failure
Redundant power supply failure
High temperature
Management module failures—Management module failed self-test or lost communication with management module
Slot failure—Lost communications detected, slot self-test failure or unsupported module, or chassis hot swap failure
Fabric power failure
Internal power supply: Fan failure
Internal power supply failure
Internal power supply main PoE power failure
Internal power supply: Main inlet exceeds/within total fault count
Bad driver—Too many undersized/giant packets
Bad transceiver—Excessive jabbering
Bad cable—Excessive CRC/alignment errors
Too long cable—Excessive late collisions
Over bandwidth—High collision or drop rate
Broadcast storm—Excessive broadcasts
Duplex mismatch HDx—Duplex mismatch. Reconfigure to Full Duplex
Duplex mismatch FDx—Duplex mismatch. Reconfigure port to Auto
Link flap—Rapid detection of link faults and recoveries

MAS switches:

Fan failure
High temperature

{
    "alert_type": "SWITCH_HARDWARE_FAILURE",
    "description": "Switch with serial CNXXYYZZAA : Fan 1 failed ",
    "timestamp": 1569505920,
    "webhook": "4d588353-3355-487d-81af-c97f62b0abb0",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1307",
    "state": "Open",
    "nid": 207,
    "details": {
        "group": "0",
        "name": "Aruba-2930F-24G-PoEP-4SFPP",
        "ip": "10.10.10.10",
        "labels": [],
        "mac": "55:88:aa:bb:dd:cc",
        "time": "2019-09-26 13:52:00 UTC",
        "threshold": "1",
        "serial": "CNXXYYZZAA"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "id": "AXyzbcapqrstn24BIWcc",
    "severity": "Critical"
}

Switch Stack Commander Change

Generates an alert when there is a change in Stack commander. This alert is enabled by default and the alert severity is Major.

{
  "id": "AXyzbcapqrstn24BIWcc",
  "nid": 1310,
  "alert_type": "SWITCH_STACK_COMMANDER_CHANGE",
  "setting_id": "ggsswerr90254beccccaaazza05f17-1310",
  "device_id": "SG0101DNHT",
  "description": "New Commander with  Serial ID: SG9S23Q1B5, MAC Address: 38:aa:bb:dd:c4:c0, Hostname: Commander, Stack ID: 5tffb0fb-2346-48df-a0c4-91123a71afa, Group: 322 Connected, Old Commander Serial ID: SG0101DNHT, Mac Address: 38:aa:cc:ee:c5:80",
  "state": "Open",
  "severity": "Critical",
  "operation": "create",
  "timestamp": 1631115869,
  "details": {
    "old_serial": "SG0101DNHT",
    "old_mac": "38:aa:cc:ee:c5:80",
    "new_serial": "SG9S23Q1B5",
    "new_mac": "38:aa:bb:dd:c4:c0",
    "host": "Commander",
    "stack_id": "5tffb0fb-2346-48df-a0c4-91123a71afa",
    "group": "322",
    "labels": "",
    "serial": "SG0101DNHT",
    "time": "2021-09-08 15:44:29 UTC"
  },
  "webhook": "374b4438-dff9-464c-a03e-a781c6c9a68f",
  "text": "New Commander with  Serial ID: SG9S23Q1B5, MAC Address: 38:aa:bb:dd:c4:c0, Hostname: Commander, Stack ID: 5tffb0fb-2346-48df-a0c4-91123a71afa, Group: 322 Connected, Old Commander Serial ID: SG0101DNHT, Mac Address: 38:aa:cc:ee:c5:80"
}

Stack Member Added

Generates an alert when a stack member is added. This alert is enabled by default and the alert severity is Major

{
  "id": "AXyzbcapqrstn24BIWcc",
  "nid": 1309,
  "alert_type": "SWITCH_STACK_MEMBER_ADDED_REMOVED",
  "setting_id": "ggsswerr90254beccccaaazza05f17-1309",
  "device_id": "SG0101DNHT",
  "description": "Stack Member with Serial ID: SG0101DNHT, MAC Address: 38:aa:cc:ee:c5:80, Member ID: 4 and Role: ['Member'] Added To stack with Hostname: 6300, Stack ID: 5tffb0fb-2346-48df-a0c4-91123a71afa",
  "state": "Open",
  "severity": "Major",
  "operation": "create",
  "timestamp": 1631119006,
  "details": {
    "serial": "SG0101DNHT",
    "mac": "38:aa:cc:ee:c5:80",
    "mem_id": "4",
    "role": [
      "Member"
    ],
    "action": "Added To",
    "host": "6300",
    "stack_id": "5tffb0fb-2346-48df-a0c4-91123a71afa",
    "group": "326",
    "time": "2021-09-08 16:36:46 UTC"
  },
  "webhook": "374b4438-dff9-464c-a03e-a781c6c9a68f",
  "text": "Stack Member with Serial ID: SG0101DNHT, MAC Address: 38:aa:cc:ee:c5:80, Member ID: 4 and Role: ['Member'] Added To stack with Hostname: 6300, Stack ID: 5tffb0fb-2346-48df-a0c4-91123a71afa"
}

Stack Member Removed

Generates an alert when a stack member is removed. This alert is enabled by default and the alert severity is Major.

{
  "id": "AXyzbcapqrstn24BIWcc",
  "nid": 1309,
  "alert_type": "SWITCH_STACK_MEMBER_ADDED_REMOVED",
  "setting_id": "ggsswerr90254beccccaaazza05f17-1309",
  "device_id": "SG0101DNHT",
  "description": "Stack Member with Serial ID: SG0101DNHT, MAC Address: , Member ID: 4 and Role: ['Member'] Removed From stack with Hostname: 6300, Stack ID: 5tffb0fb-2346-48df-a0c4-91123a71afa",
  "state": "Open",
  "severity": "Major",
  "operation": "create",
  "timestamp": 1631118901,
  "details": {
    "serial": "SG0101DNHT",
    "mac": "",
    "mem_id": "4",
    "role": [
      "Member"
    ],
    "action": "Removed From",
    "host": "6300",
    "stack_id": "5tffb0fb-2346-48df-a0c4-91123a71afa",
    "group": "326",
    "time": "2021-09-08 16:35:01 UTC"
  },
  "webhook": "374b4438-dff9-464c-a03e-a781c6c9a68f",
  "text": "Stack Member with Serial ID: SG0101DNHT, MAC Address: , Member ID: 4 and Role: ['Member'] Removed From stack with Hostname: 6300, Stack ID: 5tffb0fb-2346-48df-a0c4-91123a71afa"
}

Switch STP Root Change

Generates an alert when there is a change in the Spanning Tree Protocol (STP) root. This alert is enabled by default and the alert severity is Major. This alert is applicable only to AOS-Switches.

{
  "id": "AXyzbcapqrstn24BIWcc",
  "nid": 1308,
  "alert_type": "SWITCH_STP_ROOT_CHANGE",
  "setting_id": "ggsswerr90254beccccaaazza05f17-1308",
  "device_id": "QXASDFG80",
  "description": "CST Root changed on Sep 24 10:57:09 from Switch QXASDFG80.dummy with Serial: QXASDFG80, IP Address: 10.10.10.10 and Priority: 24576 to Switch aa:bb:cc:dd:ee:ff with Serial:  , IP Address:   and Priority 20480",
  "state": "Open",
  "severity": "Critical",
  "operation": "create",
  "timestamp": 1629816886,
  "details": {
    "ts": "Sep 24 10:57:09",
    "pr1": "24576",
    "pr2": "20480",
    "host1": "QXASDFG80.dummy",
    "host2": "aa:bb:cc:dd:ee:ff",
    "ip1": "10.10.10.10",
    "ip2": " ",
    "serial1": "QXASDFG80",
    "serial2": " ",
    "type": "CST",
    "group": "16336",
    "labels": "5844",
    "serial": "QXASDFG80",
    "time": "2021-08-24 14:54:46 UTC"
  },
  "webhook": "34000e8a-475c-46e3-9bec-79c5f281e868",
  "text": "CST Root changed on Sep 24 10:57:09 from Switch QXASDFG80.dummy with Serial: QXASDFG80, IP Address: 10.10.10.10 and Priority: 24576 to Switch aa:bb:cc:dd:ee:ff with Serial:  , IP Address:   and Priority 20480"
}