HomeGuidesAPI Reference
GuidesAPI ReferenceGitHubAirheads Developer CommunityLog In
Guides

Switch Alerts

Following are the switch alerts that you can configure for notification over Webhooks. Click on an alert to see its description and JSON payload:

New Switch Connected

Generates an alert when a new switch is connected.

{
 	"id": "AXdpfWeFo68tULajSfwu",
 	"nid": 201,
 	"alert_type": "New Switch Connected",
 	"setting_id": "ggsswerr90254beccccaaazza05f17-201",
 	"device_id": "CNXXYYZZAA",
 	"description": "New Switch with serial CNXXYYZZAA, MAC address 55:88:aa:bb:dd:cc IP address 10.21.20.231 and Hostname Aruba-2930F-24G-PoEP-4SFPP connected, Group:unprovisioned, Site:Bangalore Site",
 	"state": "Open",
 	"severity": "Major",
 	"operation": "create",
 	"timestamp": 1612382562,
 	"details": {
 		"group": "1",
 		"labels": "46",
 		"_rule_number": "0",
 		"params": [
 			"CNXXYYZZAA",
 			"55:88:aa:bb:dd:cc",
 			"10.10.10.10",
 			"Aruba-2930F-24G-PoEP-4SFPP"
 		],
 		"serial": "CNXXYYZZAA",
 		"time": "2021-02-03 20:02:42 UTC",
 		"group_name": "unprovisioned",
 		"site_name": "Bangalore Site"
 	},
 	"webhook": "8077a55e-f8d3-43af-a67f-12263f5b778e",
 	"text": "New Switch with serial CNXXYYZZAA, MAC address 55:88:aa:bb:dd:cc IP address 10.10.10.10 and Hostname Aruba-2930F-24G-PoEP-4SFPP connected, Group:unprovisioned, Site:Bangalore Site"
 }

Switch Disconnected

Generates an alert when a switch is disconnected. This alert is enabled by default and the alert severity is Major. In the Duration field, enter the duration during which the condition persists. The alert must be generated if the condition persists even after this duration. The default value is 10 minutes.

{
	"id": "AXyzbcapqrstn24BIWcc",
	"nid": 203,
	"alert_type": "Switch Disconnected",
	"setting_id": "ggsswerr90254beccccaaazza05f17-203",
	"device_id": "CNXXYYZZAA",
	"description": "Switch with serial CNXXYYZZAA, MAC address 55:88:aa:bb:dd:cc IP address 10.10.10.10 and Hostname Aruba-2930F-24G-PoEP-4SFPP reconnected",
	"state": "Close",
	"severity": "Major",
	"operation": "update",
	"timestamp": 1612383547,
	"details": {
		"params": [
			"CNXXYYZZAA",
			"55:88:aa:bb:dd:cc",
			"10.10.10.10",
			"Aruba-2930F-24G-PoEP-4SFPP",
			"",
			""
		],
		"serial": "CNXXYYZZAA",
		"time": "2021-01-08 10:31:07 UTC",
		"conn_status": "reconnected"
	},
	"webhook": "8077a55e-f8d3-43af-a67f-12263f5b778e",
	"text": "Switch with serial CNXXYYZZAA, MAC address 55:88:aa:bb:dd:cc IP address 10.10.10.10 and Hostname Aruba-2930F-24G-PoEP-4SFPP reconnected"
}

Switch Mismatch Config

Generates an alert when there is a mismatch in switch configuration.

{
    "alert_type": "SWITCH_CONFIG_MISMATCH",
    "description": "Config mismatch occurred in switch with serial CNXXYYZZAA MAC address 55:88:aa:bb:dd:cc and IP address 10.10.10.10 and Hostname Aruba - 2930 F - 48 G - PoEP - 4 SFPP ",
    "timestamp": 1569505920,
    "webhook": "4d588353-3355-487d-81af-c97f62b0abb0",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1307",
    "state": "Open",
    "nid": 206,
    "details": {
        "group": "0",
        "name": "Aruba-2930F-24G-PoEP-4SFPP",
        "ip": "10.10.10.10",
        "labels": [],
        "mac": "55:88:aa:bb:dd:cc",
        "time": "2019-09-26 13:52:00 UTC",
        "threshold": "1",
        "serial": "CNXXYYZZAA"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "id": "AXyzbcapqrstn24BIWcc",
    "severity": "Critical"
}

Switch CPU Utilization

Generates an alert when the switch CPU utilization exceeds the threshold value. In the Duration field, enter the duration after which the alert must be generated. You can add additional rule(s) for this alert.

{
    "id": "AXyzbcapqrstn24BIWcc",
    "alert_type": "SWITCH_CPU_OVER_UTILIZATION",
    "description": "CPU utilization for Switch Aruba-2930F-48G-PoEP-4SFPP with serial CNXXYYZZAA has been above 5% for about 5 minutes since 2019 - 09 - 26 06: 07: 00 UTC.",
    "timestamp": 1569478320,
    "webhook": "f8b021a2-8127-4c28-a755-8ee6e01ada66",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1300",
    "state": "Open",
    "nid": 1300,
    "details": {
        "_rule_number": "0",
        "group": "41",
        "name": "Aruba-2930F-48G-PoEP-4SFPP",
        "duration": "5",
        "time": "2019-09-26 06:07:00 UTC",
        "threshold": "5",
        "ds_key": "ggsswerr90254beccccaaazza05f17.CNXXYYZZAA.cpu_utilization.5m",
        "serial": "CNXXYYZZAA",
        "unit": "%"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "severity": "Critical"
}

Switch Memory Utilization

Generates an alert when the switch memory utilization exceeds the threshold value. In the Duration field, enter the duration after which the alert must be generated. You can add additional rule(s) for this alert.

{
  "id": "AXyzbcapqrstn24BIWcc",
  "nid": 1301,
  "alert_type": "SWITCH_MEMORY_OVER_UTILIZATION",
  "setting_id": "ggsswerr90254beccccaaazza05f17-1301",
  "device_id": "CNXXYYZZAA",
  "description": "Memory utilization for Switch  with serial CNXXYYZZAA has been above 1% for about 5 minutes since 2021-02-04 07:30:00 UTC",
  "state": "Open",
  "severity": "Critical",
  "operation": "create",
  "timestamp": 1612424100,
  "details": {
    "name": "",
    "unit": "%",
    "serial": "CNXXYYZZAA",
    "group": "212",
    "_rule_number": "0",
    "ds_key": "ggsswerr90254beccccaaazza05f17.CNXXYYZZAA.memory_utilization.5m",
    "duration": "5",
    "threshold": "1",
    "time": "2021-02-04 07:30:00 UTC"
  },
  "webhook": "8077a55e-f8d3-43af-a67f-12263f5b778e",
  "text": "Memory utilization for Switch  with serial CNXXYYZZAA has been above 1% for about 5 minutes since 2021-02-04 07:30:00 UTC"
}

Switch Port Tx Rate

In the Transform Function drop-down, select either absolute or percentage. Select absolute to generate an alert if the data transmission rate of the port (in terms of Mbps) exceeds the threshold value. Select percentage to generate an alert if the data transmission rate of the port (in terms of utilization as a percentage of total bandwidth available) exceeds the threshold value. In the Interface field, enter the interface name. You can add additional rule(s) for this alert.

{
    "alert_type": "SWITCH_INTERFACE_TX_RATE",
    "description": "Transfer rate for Interface 19 on Switch Aruba-2930F-24G-PoEP-4SFPP has been above 1 % for about 5 minutes since 2019-09-26 13:18:00 UTC.",
    "timestamp": 1569504180,
    "webhook": "4d588353-3355-487d-81af-c97f62b0abb0",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1302",
    "state": "Open",
    "nid": 1302,
    "details": {
        "_rule_number": "0",
        "group": "1",
        "name": "Aruba-2930F-24G-PoEP-4SFPP",
        "max_value_for_percentage": "1000.0",
        "threshold": "1",
        "intf_name": "19",
        "time": "2019-09-26 13:18:00 UTC",
        "duration": "5",
        "ds_key": "ggsswerr90254beccccaaazza05f17.CNXXYYZZAA.intf.tx_utilization.5m",
        "serial": "CNXXYYZZAA",
        "unit": "%"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "id": "AXyzbcapqrstn24BIWcc",
    "severity": "Critical"
}

Switch Port Rx Rate

In the Transform Function drop-down, select either absolute or percentage. Select absolute to generate an alert if the data reception rate of the port (in terms of Mbps) exceeds the threshold value. Select percentage to generate an alert if the data reception rate of the port (in terms of utilization as a percentage of total bandwidth available) exceeds the threshold value. In the Interface field, enter the interface name. You can add additional rule(s) for this alert.

{
    "alert_type": "SWITCH_INTERFACE_RX_RATE",
    "description": "Receive rate for Interface 15 on Switch Aruba-2930F-24G-PoEP-4SFPP has been above 1 % for about 5 minutes since 2019-09-26 13:18:00 UTC.",
    "timestamp": 1569504180,
    "webhook": "4d588353-3355-487d-81af-c97f62b0abb0",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1303",
    "state": "Open",
    "nid": 1303,
    "details": {
        "_rule_number": "0",
        "group": "1",
        "name": "Aruba-2930F-24G-PoEP-4SFPP",
        "max_value_for_percentage": "1000.0",
        "threshold": "1",
        "intf_name": "15",
        "time": "2019-09-26 13:18:00 UTC",
        "duration": "5",
        "ds_key": "ggsswerr90254beccccaaazza05f17.CNXXYYZZAA.intf.rx_utilization.5m",
        "serial": "CNXXYYZZAA",
        "unit": "%"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "id": "AXyzbcapqrstn24BIWcc",
    "severity": "Critical"
}

Switch Port Duplex Mode

Generates an alert when the port is operating in half-duplex mode. In the Interface field, enter the interface name.

{
  "alert_type": "SWITCH_INTERFACE_DUPLEX_MODE",
  "description": "Interface 19 on switch Aruba-2930F-24G-PoEP-4SFPP with serial CNXXYYZZAA is operating at Half-Duplex mode",
  "timestamp": 1569901561,
  "webhook": "c71404f4-00c1-4241-8bf4-c8d3f981caa2",
  "setting_id": "ggsswerr90254beccccaaazza05f17-1306",
  "state": "Open",
  "nid": 1306,
  "details": {
    "group": "1",
    "name": "Aruba-2930F-24G-PoEP-4SFPP",
    "labels": "",
    "mode": "Half",
    "intf_name": "19",
    "time": "2019-10-01 03:46:01 UTC",
    "serial": "CNXXYYZZAA"
  },
  "operation": "create",
  "device_id": "CNXXYYZZAA",
  "id": "AW2FbMiOYu0OgJ2asaWh",
  "severity": "Critical"
}

Switch Port Input Errors

Generates an alert when the percentage of input errors on the port exceeds the threshold value. In the Interface field, enter the interface name. You can add additional rule(s) for this alert.

{
    "alert_type": "SWITCH_INTERFACE_INPUT_ERRORS",
    "description": "Input errors for Interface 19 on Switch Aruba-2930F-24G-PoEP-4SFPP has been above 90% for about 30 minutes since 2019-09-26 06:07:00 UTC .",
    "timestamp": 1569505920,
    "webhook": "4d588353-3355-487d-81af-c97f62b0abb0",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1307",
    "state": "Open",
    "nid": 1304,
    "details": {
        "group": "0",
        "name": "Aruba-2930F-24G-PoEP-4SFPP",
        "ip": "10.10.10.10",
        "labels": [],
        "mac": "e0:07:1b:c4:8d:80",
        "time": "2019-09-26 13:52:00 UTC",
        "threshold": "1",
        "serial": "CNXXYYZZAA"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "id": "AXyzbcapqrstn24BIWcc",
    "severity": "Critical"
}

Switch Port Output Errors

Generates an alert when the percentage of output errors on the port exceeds the threshold value. In the Interface field, enter the interface name. You can add additional rule(s) for this alert.

{
    "alert_type": "SWITCH_INTERFACE_OUTPUT_ERRORS",
    "description": "Output errors for Interface 19 on Switch Aruba-2930F-24G-PoEP-4SFPP has been above 90% for about 30 minutes since 2019-09-26 06:07:00 UTC. ",
    "timestamp": 1569505920,
    "webhook": "4d588353-3355-487d-81af-c97f62b0abb0",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1307",
    "state": "Open",
    "nid": 1305,
    "details": {
        "group": "0",
        "name": "Aruba-2930F-24G-PoEP-4SFPP",
        "ip": "10.10.10.10",
        "labels": [],
        "mac": "e0:07:1b:c4:8d:80",
        "time": "2019-09-26 13:52:00 UTC",
        "threshold": "1",
        "serial": "CNXXYYZZAA"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "id": "AXyzbcapqrstn24BIWcc",
    "severity": "Critical"
}

Switch Hardware Failure

Switch Hardware Failure—Generates an alert when the switch hardware fails. The following are the typical hardware failures for Aruba and MAS switches:

  1. Aruba switches
  • Fan failure
  • Power supply failure
  • Redundant power supply failure
  • High temperature
  • Management module failures—Management module failed self-test or lost communication with management module
  • Slot failure—Lost communications detected, slot self-test failure or unsupported module, or chassis hot swap failure
  • Fabric power failure
  • Internal power supply: Fan failure
  • Internal power supply failure
  • Internal power supply main PoE power failure
  • Internal power supply: Main inlet exceeds/within total fault count
  • Bad driver—Too many undersized/giant packets
  • Bad transceiver—Excessive jabbering
  • Bad cable—Excessive CRC/alignment errors
  • Too long cable—Excessive late collisions
  • Over bandwidth—High collision or drop rate
  • Broadcast storm—Excessive broadcasts
  • Duplex mismatch HDx—Duplex mismatch. Reconfigure to Full Duplex
  • Duplex mismatch FDx—Duplex mismatch. Reconfigure port to Auto
  • Link flap—Rapid detection of link faults and recoveries
  1. MAS switches:
  • Fan failure
  • High temperature
{
    "alert_type": "SWITCH_HARDWARE_FAILURE",
    "description": "Switch with serial CNXXYYZZAA : Fan 1 failed ",
    "timestamp": 1569505920,
    "webhook": "4d588353-3355-487d-81af-c97f62b0abb0",
    "setting_id": "ggsswerr90254beccccaaazza05f17-1307",
    "state": "Open",
    "nid": 207,
    "details": {
        "group": "0",
        "name": "Aruba-2930F-24G-PoEP-4SFPP",
        "ip": "10.10.10.10",
        "labels": [],
        "mac": "55:88:aa:bb:dd:cc",
        "time": "2019-09-26 13:52:00 UTC",
        "threshold": "1",
        "serial": "CNXXYYZZAA"
    },
    "operation": "create",
    "device_id": "CNXXYYZZAA",
    "id": "AXyzbcapqrstn24BIWcc",
    "severity": "Critical"
}

Switch Stack Commander Change

Generates an alert when there is a change in Stack commander. This alert is enabled by default and the alert severity is Major.

{
  "id": "AXyzbcapqrstn24BIWcc",
  "nid": 1310,
  "alert_type": "SWITCH_STACK_COMMANDER_CHANGE",
  "setting_id": "ggsswerr90254beccccaaazza05f17-1310",
  "device_id": "SG0101DNHT",
  "description": "New Commander with  Serial ID: SG9S23Q1B5, MAC Address: 38:aa:bb:dd:c4:c0, Hostname: Commander, Stack ID: 5tffb0fb-2346-48df-a0c4-91123a71afa, Group: 322 Connected, Old Commander Serial ID: SG0101DNHT, Mac Address: 38:aa:cc:ee:c5:80",
  "state": "Open",
  "severity": "Critical",
  "operation": "create",
  "timestamp": 1631115869,
  "details": {
    "old_serial": "SG0101DNHT",
    "old_mac": "38:aa:cc:ee:c5:80",
    "new_serial": "SG9S23Q1B5",
    "new_mac": "38:aa:bb:dd:c4:c0",
    "host": "Commander",
    "stack_id": "5tffb0fb-2346-48df-a0c4-91123a71afa",
    "group": "322",
    "labels": "",
    "serial": "SG0101DNHT",
    "time": "2021-09-08 15:44:29 UTC"
  },
  "webhook": "374b4438-dff9-464c-a03e-a781c6c9a68f",
  "text": "New Commander with  Serial ID: SG9S23Q1B5, MAC Address: 38:aa:bb:dd:c4:c0, Hostname: Commander, Stack ID: 5tffb0fb-2346-48df-a0c4-91123a71afa, Group: 322 Connected, Old Commander Serial ID: SG0101DNHT, Mac Address: 38:aa:cc:ee:c5:80"
}

Stack Member Added

Generates an alert when a stack member is added. This alert is enabled by default and the alert severity is Major

{
  "id": "AXyzbcapqrstn24BIWcc",
  "nid": 1309,
  "alert_type": "SWITCH_STACK_MEMBER_ADDED_REMOVED",
  "setting_id": "ggsswerr90254beccccaaazza05f17-1309",
  "device_id": "SG0101DNHT",
  "description": "Stack Member with Serial ID: SG0101DNHT, MAC Address: 38:aa:cc:ee:c5:80, Member ID: 4 and Role: ['Member'] Added To stack with Hostname: 6300, Stack ID: 5tffb0fb-2346-48df-a0c4-91123a71afa",
  "state": "Open",
  "severity": "Major",
  "operation": "create",
  "timestamp": 1631119006,
  "details": {
    "serial": "SG0101DNHT",
    "mac": "38:aa:cc:ee:c5:80",
    "mem_id": "4",
    "role": [
      "Member"
    ],
    "action": "Added To",
    "host": "6300",
    "stack_id": "5tffb0fb-2346-48df-a0c4-91123a71afa",
    "group": "326",
    "time": "2021-09-08 16:36:46 UTC"
  },
  "webhook": "374b4438-dff9-464c-a03e-a781c6c9a68f",
  "text": "Stack Member with Serial ID: SG0101DNHT, MAC Address: 38:aa:cc:ee:c5:80, Member ID: 4 and Role: ['Member'] Added To stack with Hostname: 6300, Stack ID: 5tffb0fb-2346-48df-a0c4-91123a71afa"
}

Stack Member Removed

Generates an alert when a stack member is removed. This alert is enabled by default and the alert severity is Major.

{
  "id": "AXyzbcapqrstn24BIWcc",
  "nid": 1309,
  "alert_type": "SWITCH_STACK_MEMBER_ADDED_REMOVED",
  "setting_id": "ggsswerr90254beccccaaazza05f17-1309",
  "device_id": "SG0101DNHT",
  "description": "Stack Member with Serial ID: SG0101DNHT, MAC Address: , Member ID: 4 and Role: ['Member'] Removed From stack with Hostname: 6300, Stack ID: 5tffb0fb-2346-48df-a0c4-91123a71afa",
  "state": "Open",
  "severity": "Major",
  "operation": "create",
  "timestamp": 1631118901,
  "details": {
    "serial": "SG0101DNHT",
    "mac": "",
    "mem_id": "4",
    "role": [
      "Member"
    ],
    "action": "Removed From",
    "host": "6300",
    "stack_id": "5tffb0fb-2346-48df-a0c4-91123a71afa",
    "group": "326",
    "time": "2021-09-08 16:35:01 UTC"
  },
  "webhook": "374b4438-dff9-464c-a03e-a781c6c9a68f",
  "text": "Stack Member with Serial ID: SG0101DNHT, MAC Address: , Member ID: 4 and Role: ['Member'] Removed From stack with Hostname: 6300, Stack ID: 5tffb0fb-2346-48df-a0c4-91123a71afa"
}

Switch STP Root Change

Generates an alert when there is a change in the Spanning Tree Protocol (STP) root. This alert is enabled by default and the alert severity is Major. This alert is applicable only to AOS-Switches.

{
  "id": "AXyzbcapqrstn24BIWcc",
  "nid": 1308,
  "alert_type": "SWITCH_STP_ROOT_CHANGE",
  "setting_id": "ggsswerr90254beccccaaazza05f17-1308",
  "device_id": "QXASDFG80",
  "description": "CST Root changed on Sep 24 10:57:09 from Switch QXASDFG80.dummy with Serial: QXASDFG80, IP Address: 10.10.10.10 and Priority: 24576 to Switch aa:bb:cc:dd:ee:ff with Serial:  , IP Address:   and Priority 20480",
  "state": "Open",
  "severity": "Critical",
  "operation": "create",
  "timestamp": 1629816886,
  "details": {
    "ts": "Sep 24 10:57:09",
    "pr1": "24576",
    "pr2": "20480",
    "host1": "QXASDFG80.dummy",
    "host2": "aa:bb:cc:dd:ee:ff",
    "ip1": "10.10.10.10",
    "ip2": " ",
    "serial1": "QXASDFG80",
    "serial2": " ",
    "type": "CST",
    "group": "16336",
    "labels": "5844",
    "serial": "QXASDFG80",
    "time": "2021-08-24 14:54:46 UTC"
  },
  "webhook": "34000e8a-475c-46e3-9bec-79c5f281e868",
  "text": "CST Root changed on Sep 24 10:57:09 from Switch QXASDFG80.dummy with Serial: QXASDFG80, IP Address: 10.10.10.10 and Priority: 24576 to Switch aa:bb:cc:dd:ee:ff with Serial:  , IP Address:   and Priority 20480"
}