This macro is used in block devices discovery. Can be overridden on the host or linked template level
|`.+`| |{$VFS.DEV.DEVNAME.NOT_MATCHES}|This macro is used in block devices discovery. Can be overridden on the host or linked template level
|`Macro too long. Please see the template.`| |{$CPU.UTIL.CRIT}||`90`| |{$LOAD_AVG_PER_CPU.MAX.WARN}|Load per CPU considered sustainable. Tune if needed.
|`1.5`| |{$VFS.FS.FSNAME.NOT_MATCHES}|This macro is used in filesystems discovery. Can be overridden on the host or linked template level
|`^(/dev\|/sys\|/run\|/proc\|.+/shm$)`| |{$VFS.FS.FSNAME.MATCHES}|This macro is used in filesystems discovery. Can be overridden on the host or linked template level
|`.+`| |{$VFS.FS.FSTYPE.NOT_MATCHES}|This macro is used in filesystems discovery. Can be overridden on the host or linked template level
|`^\s$`| |{$VFS.FS.FSTYPE.MATCHES}|This macro is used in filesystems discovery. Can be overridden on the host or linked template level
|`.*(\.4\|\.9\|hrStorageFixedDisk\|hrStorageFlashMemory)$`| |{$VFS.FS.FREE.MIN.CRIT}|The critical threshold of the filesystem utilization.
|`5G`| |{$VFS.FS.FREE.MIN.WARN}|The warning threshold of the filesystem utilization.
|`10G`| |{$VFS.FS.INODE.PFREE.MIN.CRIT}||`10`| |{$VFS.FS.INODE.PFREE.MIN.WARN}||`20`| |{$VFS.FS.PUSED.MAX.CRIT}||`90`| |{$VFS.FS.PUSED.MAX.WARN}||`80`| |{$SNMP.TIMEOUT}||`5m`| |{$ICMP_LOSS_WARN}||`20`| |{$ICMP_RESPONSE_TIME_WARN}||`0.15`| |{$IF.ERRORS.WARN}||`2`| |{$IF.UTIL.MAX}||`90`| |{$IFCONTROL}||`1`| |{$NET.IF.IFNAME.MATCHES}||`^.*$`| |{$NET.IF.IFNAME.NOT_MATCHES}|Filter out loopbacks, nulls, docker veth links and docker0 bridge by default
|`Macro too long. Please see the template.`| |{$NET.IF.IFOPERSTATUS.MATCHES}||`^.*$`| |{$NET.IF.IFOPERSTATUS.NOT_MATCHES}|Ignore notPresent(6)
|`^6$`| |{$NET.IF.IFADMINSTATUS.MATCHES}|Ignore notPresent(6)
|`^.*`| |{$NET.IF.IFADMINSTATUS.NOT_MATCHES}|Ignore down(2) administrative status
|`^2$`| |{$NET.IF.IFDESCR.MATCHES}||`.*`| |{$NET.IF.IFDESCR.NOT_MATCHES}||`CHANGE_IF_NEEDED`| |{$NET.IF.IFALIAS.MATCHES}||`.*`| |{$NET.IF.IFALIAS.NOT_MATCHES}||`CHANGE_IF_NEEDED`| |{$NET.IF.IFTYPE.MATCHES}||`.*`| |{$NET.IF.IFTYPE.NOT_MATCHES}||`CHANGE_IF_NEEDED`| ### Items |Name|Description|Type|Key and additional info| |----|-----------|----|-----------------------| |Linux: Memory utilization|Please note that memory utilization is a rough estimate, since memory available is calculated as free+buffers+cached, which is not 100% accurate, but the best we can get using SNMP.
|Calculated|vm.memory.util[snmp]| |Linux: Free memory|MIB: UCD-SNMP-MIB
|SNMP agent|vm.memory.free[memAvailReal.0]**Preprocessing**
Custom multiplier: `1024`
MIB: UCD-SNMP-MIB
Memory used by kernel buffers (Buffers in /proc/meminfo).
|SNMP agent|vm.memory.buffers[memBuffer.0]**Preprocessing**
Custom multiplier: `1024`
MIB: UCD-SNMP-MIB
Memory used by the page cache and slabs (Cached and Slab in /proc/meminfo).
|SNMP agent|vm.memory.cached[memCached.0]**Preprocessing**
Custom multiplier: `1024`
MIB: UCD-SNMP-MIB
The total memory expressed in bytes.
|SNMP agent|vm.memory.total[memTotalReal.0]**Preprocessing**
Custom multiplier: `1024`
Please note that memory utilization is a rough estimate, since memory available is calculated as free+buffers+cached, which is not 100% accurate, but the best we can get using SNMP.
|Calculated|vm.memory.available[snmp]| |Linux: Total swap space|MIB: UCD-SNMP-MIB
The total amount of swap space configured for this host.
|SNMP agent|system.swap.total[memTotalSwap.0]**Preprocessing**
Custom multiplier: `1024`
MIB: UCD-SNMP-MIB
The amount of swap space currently unused or available.
|SNMP agent|system.swap.free[memAvailSwap.0]**Preprocessing**
Custom multiplier: `1024`
The free space of the swap volume/file expressed in %.
|Calculated|system.swap.pfree[snmp]| |Linux: SNMP walk block devices|Block devices are discovered from UCD-DISKIO-MIB::diskIOTable (http://net-snmp.sourceforge.net/docs/mibs/ucdDiskIOMIB.html#diskIOTable).
|SNMP agent|vfs.dev.walk| |Linux: Load average (1m avg)|MIB: UCD-SNMP-MIB
|SNMP agent|system.cpu.load.avg1[laLoad.1]| |Linux: Load average (5m avg)|MIB: UCD-SNMP-MIB
|SNMP agent|system.cpu.load.avg5[laLoad.2]| |Linux: Load average (15m avg)|MIB: UCD-SNMP-MIB
|SNMP agent|system.cpu.load.avg15[laLoad.3]| |Linux: SNMP walk system CPUs|MIB: HOST-RESOURCES-MIB
Discovering system CPUs.
|SNMP agent|system.cpu.walk| |Linux: Number of CPUs|Count the number of CPU cores by counting number of cores discovered in hrProcessorTable using LLD.
|Dependent item|system.cpu.num[snmp]**Preprocessing**
SNMP walk to JSON
JavaScript: `The text is too long. Please see the template.`
**Preprocessing**
**Preprocessing**
MIB: HOST-RESOURCES-MIB
HOST-RESOURCES-MIB::hrStorage discovery.
|SNMP agent|vfs.fs.walk| |Linux: Uptime (network)|MIB: SNMPv2-MIB
The time (in hundredths of a second) since the network management portion of the system was last re-initialized.
|SNMP agent|system.net.uptime[sysUpTime.0]**Preprocessing**
Custom multiplier: `0.01`
MIB: HOST-RESOURCES-MIB
The amount of time since this host was last initialized. Note that this is different from sysUpTime in the SNMPv2-MIB [RFC1907] because sysUpTime is the uptime of the network management portion of the system.
|SNMP agent|system.hw.uptime[hrSystemUptime.0]**Preprocessing**
Check for not supported value
⛔️Custom on fail: Set value to: `0`
Custom multiplier: `0.01`
The item is used to collect all SNMP traps unmatched by other snmptrap items
|SNMP trap|snmptrap.fallback| |Linux: System location|MIB: SNMPv2-MIB
The physical location of this node (e.g., `telephone closet, 3rd floor'). If the location is unknown, the value is the zero-length string.
|SNMP agent|system.location[sysLocation.0]**Preprocessing**
Discard unchanged with heartbeat: `12h`
MIB: SNMPv2-MIB
The textual identification of the contact person for this managed node, together with information on how to contact this person. If no contact information is known, the value is the zero-length string.
|SNMP agent|system.contact[sysContact.0]**Preprocessing**
Discard unchanged with heartbeat: `12h`
MIB: SNMPv2-MIB
The vendor's authoritative identification of the network management subsystem contained in the entity. This value is allocated within the SMI enterprises subtree (1.3.6.1.4.1) and provides an easy and unambiguous means for determining`what kind of box' is being managed. For example, if vendor`Flintstones, Inc.' was assigned the subtree1.3.6.1.4.1.4242, it could assign the identifier 1.3.6.1.4.1.4242.1.1 to its `Fred Router'.
|SNMP agent|system.objectid[sysObjectID.0]**Preprocessing**
Discard unchanged with heartbeat: `12h`
MIB: SNMPv2-MIB
An administratively-assigned name for this managed node.By convention, this is the node's fully-qualified domain name. If the name is unknown, the value is the zero-length string.
|SNMP agent|system.name**Preprocessing**
Discard unchanged with heartbeat: `12h`
MIB: SNMPv2-MIB
A textual description of the entity. This value should
include the full name and version identification of the system's hardware type, software operating-system, and
networking software.
|SNMP agent|system.descr[sysDescr.0]**Preprocessing**
Discard unchanged with heartbeat: `12h`
Availability of SNMP checks on the host. The value of this item corresponds to availability icons in the host list.
Possible value:
0 - not available
1 - available
2 - unknown
|Zabbix internal|zabbix[host,snmp,available]| |Linux: ICMP ping||Simple check|icmpping| |Linux: ICMP loss||Simple check|icmppingloss| |Linux: ICMP response time||Simple check|icmppingsec| |Linux: SNMP walk network interfaces|Discovering interfaces from IF-MIB.
|SNMP agent|net.if.walk| |Linux: SNMP walk EtherLike-MIB interfaces|Discovering interfaces from IF-MIB and EtherLike-MIB. Interfaces with up(1) Operational Status are discovered.
|SNMP agent|net.if.duplex.walk| ### Triggers |Name|Description|Expression|Severity|Dependencies and additional info| |----|-----------|----------|--------|--------------------------------| |Linux: High memory utilization|The system is running out of free memory.
|`min(/Linux by SNMP/vm.memory.util[snmp],5m)>{$MEMORY.UTIL.MAX}`|Average|**Depends on**:If there is no swap configured, this trigger is ignored.
|`max(/Linux by SNMP/system.swap.pfree[snmp],5m)<{$SWAP.PFREE.MIN.WARN} and last(/Linux by SNMP/system.swap.total[memTotalSwap.0])>0`|Warning|**Depends on**:The load average per CPU is too high. The system may be slow to respond.
|`min(/Linux by SNMP/system.cpu.load.avg1[laLoad.1],5m)/last(/Linux by SNMP/system.cpu.num[snmp])>{$LOAD_AVG_PER_CPU.MAX.WARN} and last(/Linux by SNMP/system.cpu.load.avg5[laLoad.2])>0 and last(/Linux by SNMP/system.cpu.load.avg15[laLoad.3])>0`|Average|| |Linux: Host has been restarted|Uptime is less than 10 minutes.
|`(last(/Linux by SNMP/system.hw.uptime[hrSystemUptime.0])>0 and last(/Linux by SNMP/system.hw.uptime[hrSystemUptime.0])<10m) or (last(/Linux by SNMP/system.hw.uptime[hrSystemUptime.0])=0 and last(/Linux by SNMP/system.net.uptime[sysUpTime.0])<10m)`|Warning|**Manual close**: YesThe name of the system has changed. Acknowledge to close the problem manually.
|`last(/Linux by SNMP/system.name,#1)<>last(/Linux by SNMP/system.name,#2) and length(last(/Linux by SNMP/system.name))>0`|Info|**Manual close**: Yes| |Linux: No SNMP data collection|SNMP is not available for polling. Please check device connectivity and SNMP settings.
|`max(/Linux by SNMP/zabbix[host,snmp,available],{$SNMP.TIMEOUT})=0`|Warning|**Depends on**:Last three attempts returned timeout. Please check device connectivity.
|`max(/Linux by SNMP/icmpping,#3)=0`|High|| |Linux: High ICMP ping loss||`min(/Linux by SNMP/icmppingloss,5m)>{$ICMP_LOSS_WARN} and min(/Linux by SNMP/icmppingloss,5m)<100`|Warning|**Depends on**:Block devices are discovered from UCD-DISKIO-MIB::diskIOTable (http://net-snmp.sourceforge.net/docs/mibs/ucdDiskIOMIB.html#diskIOTable)
|Dependent item|vfs.dev.discovery[snmp]**Preprocessing**
SNMP walk to JSON
Discard unchanged with heartbeat: `1h`
MIB: UCD-DISKIO-MIB
The number of read accesses from this device since boot.
|Dependent item|vfs.dev.read.rate[diskIOReads.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.13.15.1.1.5.{#SNMPINDEX}`
MIB: UCD-DISKIO-MIB
The number of write accesses from this device since boot.
|Dependent item|vfs.dev.write.rate[diskIOWrites.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.13.15.1.1.6.{#SNMPINDEX}`
MIB: UCD-DISKIO-MIB
The 1 minute average load of disk (%)
|Dependent item|vfs.dev.util[diskIOLA1.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.13.15.1.1.9.{#SNMPINDEX}`
This discovery will create set of per core CPU metrics from UCD-SNMP-MIB, using {#CPU.COUNT} in preprocessing. That's the only reason why LLD is used.
|Dependent item|cpu.discovery[snmp]**Preprocessing**
JavaScript: `The text is too long. Please see the template.`
MIB: UCD-SNMP-MIB
The time the CPU has spent doing nothing.
|Dependent item|system.cpu.idle[ssCpuRawIdle.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.11.53.0`
JavaScript: `The text is too long. Please see the template.`
MIB: UCD-SNMP-MIB
The time the CPU has spent running the kernel and its processes.
|Dependent item|system.cpu.system[ssCpuRawSystem.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.11.52.0`
JavaScript: `The text is too long. Please see the template.`
MIB: UCD-SNMP-MIB
The time the CPU has spent running users' processes that are not niced.
|Dependent item|system.cpu.user[ssCpuRawUser.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.11.50.0`
JavaScript: `The text is too long. Please see the template.`
MIB: UCD-SNMP-MIB
The amount of "stolen" CPU from this virtual machine by the hypervisor for other tasks, such as running another virtual machine.
|Dependent item|system.cpu.steal[ssCpuRawSteal.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.11.64.0`
JavaScript: `The text is too long. Please see the template.`
MIB: UCD-SNMP-MIB
The amount of time the CPU has been servicing software interrupts.
|Dependent item|system.cpu.softirq[ssCpuRawSoftIRQ.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.11.61.0`
JavaScript: `The text is too long. Please see the template.`
MIB: UCD-SNMP-MIB
The time the CPU has spent running users' processes that have been niced.
|Dependent item|system.cpu.nice[ssCpuRawNice.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.11.51.0`
JavaScript: `The text is too long. Please see the template.`
MIB: UCD-SNMP-MIB
The amount of time the CPU has been waiting for I/O to complete.
|Dependent item|system.cpu.iowait[ssCpuRawWait.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.11.54.0`
JavaScript: `The text is too long. Please see the template.`
MIB: UCD-SNMP-MIB
The amount of time the CPU has been servicing hardware interrupts.
|Dependent item|system.cpu.interrupt[ssCpuRawInterrupt.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.11.56.0`
JavaScript: `The text is too long. Please see the template.`
MIB: UCD-SNMP-MIB
Guest time - the time spent on running a virtual CPU for a guest operating system.
|Dependent item|system.cpu.guest[ssCpuRawGuest.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.11.65.0`
JavaScript: `The text is too long. Please see the template.`
MIB: UCD-SNMP-MIB
The time spent on running a niced guest (a virtual CPU for guest operating systems under the control of the Linux kernel).
|Dependent item|system.cpu.guest_nice[ssCpuRawGuestNice.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.4.1.2021.11.66.0`
JavaScript: `The text is too long. Please see the template.`
The CPU utilization expressed in %.
|Dependent item|system.cpu.util[snmp,{#SNMPINDEX}]**Preprocessing**
JavaScript: `//Calculate utilization
return (100 - value)`
The CPU utilization is too high. The system might be slow to respond.
|`min(/Linux by SNMP/system.cpu.util[snmp,{#SNMPINDEX}],5m)>{$CPU.UTIL.CRIT}`|Warning|| ### LLD rule Mounted filesystem discovery |Name|Description|Type|Key and additional info| |----|-----------|----|-----------------------| |Mounted filesystem discovery|HOST-RESOURCES-MIB::hrStorage discovery with storage filter
|Dependent item|vfs.fs.discovery[snmp]**Preprocessing**
SNMP walk to JSON
Discard unchanged with heartbeat: `1h`
MIB: HOST-RESOURCES-MIB
The amount of the storage represented by this entry that is allocated, in units of hrStorageAllocationUnits.
|Dependent item|vfs.fs.used[hrStorageUsed.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.2.1.25.2.3.1.6.{#SNMPINDEX}`
Custom multiplier: `{#ALLOC_UNITS}`
MIB: HOST-RESOURCES-MIB
The size of the storage represented by this entry, in units of hrStorageAllocationUnits.
This object is writable to allow remote configuration of the size of the storage area in those cases where such an operation makes sense and is possible on the underlying system.
For example, the amount of main storage allocated to a buffer pool might be modified or the amount of disk space allocated to virtual storage might be modified.
|Dependent item|vfs.fs.total[hrStorageSize.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.2.1.25.2.3.1.5.{#SNMPINDEX}`
Custom multiplier: `{#ALLOC_UNITS}`
The space utilization expressed in % for {#FSNAME}.
|Calculated|vfs.fs.pused[storageUsedPercentage.{#SNMPINDEX}]| |{#FSNAME}: Free inodes in %|MIB: UCD-SNMP-MIB
If having problems collecting this item make sure access to UCD-SNMP-MIB is allowed.
|SNMP agent|vfs.fs.inode.pfree[dskPercentNode.{#SNMPINDEX}]**Preprocessing**
JavaScript: `return (100-value);`
Two conditions should match:
1. The first condition - utilization of the space should be above `{$VFS.FS.PUSED.MAX.CRIT:"{#FSNAME}"}`.
2. The second condition should be one of the following:
- the disk free space is less than `{$VFS.FS.FREE.MIN.CRIT:"{#FSNAME}"}`;
- the disk will be full in less than 24 hours.
Two conditions should match:
1. The first condition - utilization of the space should be above `{$VFS.FS.PUSED.MAX.WARN:"{#FSNAME}"}`.
2. The second condition should be one of the following:
- the disk free space is less than `{$VFS.FS.FREE.MIN.WARN:"{#FSNAME}"}`;
- the disk will be full in less than 24 hours.
It may become impossible to write to a disk if there are no index nodes left.
The following error messages may be returned as symptoms, even though the free space is available:
- 'No space left on device';
- 'Disk is full'.
It may become impossible to write to a disk if there are no index nodes left.
The following error messages may be returned as symptoms, even though the free space is available:
- 'No space left on device';
- 'Disk is full'.
Discovering interfaces from IF-MIB.
|Dependent item|net.if.discovery**Preprocessing**
SNMP walk to JSON
Discard unchanged with heartbeat: `1h`
MIB: IF-MIB
The current operational state of the interface.
- The testing(3) state indicates that no operational packet scan be passed
- If ifAdminStatus is down(2) then ifOperStatus should be down(2)
- If ifAdminStatus is changed to up(1) then ifOperStatus should change to up(1) if the interface is ready to transmit and receive network traffic
- It should change todormant(5) if the interface is waiting for external actions (such as a serial line waiting for an incoming connection)
- It should remain in the down(2) state if and only if there is a fault that prevents it from going to the up(1) state
- It should remain in the notPresent(6) state if the interface has missing(typically, hardware) components.
|Dependent item|net.if.status[ifOperStatus.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.2.1.2.2.1.8.{#SNMPINDEX}`
MIB: IF-MIB
The total number of octets received on the interface, including framing characters. This object is a 64-bit version of ifInOctets. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
|Dependent item|net.if.in[ifHCInOctets.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.2.1.31.1.1.1.6.{#SNMPINDEX}`
Custom multiplier: `8`
MIB: IF-MIB
The total number of octets transmitted out of the interface, including framing characters. This object is a 64-bit version of ifOutOctets.Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
|Dependent item|net.if.out[ifHCOutOctets.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.2.1.31.1.1.1.10.{#SNMPINDEX}`
Custom multiplier: `8`
MIB: IF-MIB
For packet-oriented interfaces, the number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
|Dependent item|net.if.in.errors[ifInErrors.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.2.1.2.2.1.14.{#SNMPINDEX}`
Discard unchanged with heartbeat: `3m`
MIB: IF-MIB
For packet-oriented interfaces, the number of outbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of outbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol. Discontinuities in the value of this counter can occur at re-initialization of the management system, and at other times as indicated by the value of ifCounterDiscontinuityTime.
|Dependent item|net.if.out.errors[ifOutErrors.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.2.1.2.2.1.20.{#SNMPINDEX}`
Discard unchanged with heartbeat: `3m`
MIB: IF-MIB
The number of outbound packets which were chosen to be discarded
even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.
One possible reason for discarding such a packet could be to free up buffer space.
Discontinuities in the value of this counter can occur at re-initialization of the management system,
and at other times as indicated by the value of ifCounterDiscontinuityTime.
|Dependent item|net.if.out.discards[ifOutDiscards.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.2.1.2.2.1.19.{#SNMPINDEX}`
Discard unchanged with heartbeat: `3m`
MIB: IF-MIB
The number of inbound packets which were chosen to be discarded
even though no errors had been detected to prevent their being deliverable to a higher-layer protocol.
One possible reason for discarding such a packet could be to free up buffer space.
Discontinuities in the value of this counter can occur at re-initialization of the management system,
and at other times as indicated by the value of ifCounterDiscontinuityTime.
|Dependent item|net.if.in.discards[ifInDiscards.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.2.1.2.2.1.13.{#SNMPINDEX}`
Discard unchanged with heartbeat: `3m`
MIB: IF-MIB
The type of interface.
Additional values for ifType are assigned by the Internet Assigned Numbers Authority (IANA),
through updating the syntax of the IANAifType textual convention.
|Dependent item|net.if.type[ifType.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.2.1.2.2.1.3.{#SNMPINDEX}`
Discard unchanged with heartbeat: `1d`
MIB: IF-MIB
An estimate of the interface's current bandwidth in units of 1,000,000 bits per second. If this object reports a value of `n' then the speed of the interface is somewhere in the range of `n-500,000' to`n+499,999'. For interfaces which do not vary in bandwidth or for those where no accurate estimation can be made, this object should contain the nominal bandwidth. For a sub-layer which has no concept of bandwidth, this object should be zero.
|Dependent item|net.if.speed[ifHighSpeed.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.2.1.31.1.1.1.15.{#SNMPINDEX}`
Custom multiplier: `1000000`
Discard unchanged with heartbeat: `1h`
This trigger expression works as follows:
1. It can be triggered if the operations status is down.
2. `{$IFCONTROL:"{#IFNAME}"}=1` - a user can redefine context macro to value - 0. That marks this interface as not important. No new trigger will be fired if this interface is down.
3. `{TEMPLATE_NAME:METRIC.diff()}=1` - the trigger fires only if the operational status was up to (1) sometime before (so, do not fire for the 'eternal off' interfaces.)
WARNING: if closed manually - it will not fire again on the next poll, because of .diff.
The utilization of the network interface is close to its estimated maximum bandwidth.
|`(avg(/Linux by SNMP/net.if.in[ifHCInOctets.{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Linux by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}]) or avg(/Linux by SNMP/net.if.out[ifHCOutOctets.{#SNMPINDEX}],15m)>({$IF.UTIL.MAX:"{#IFNAME}"}/100)*last(/Linux by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])) and last(/Linux by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0`|Warning|**Manual close**: YesIt recovers when it is below 80% of the `{$IF.ERRORS.WARN:"{#IFNAME}"}` threshold.
|`min(/Linux by SNMP/net.if.in.errors[ifInErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"} or min(/Linux by SNMP/net.if.out.errors[ifOutErrors.{#SNMPINDEX}],5m)>{$IF.ERRORS.WARN:"{#IFNAME}"}`|Warning|**Manual close**: YesThis Ethernet connection has transitioned down from its known maximum speed. This might be a sign of autonegotiation issues. Acknowledge to close the problem manually.
|`change(/Linux by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])<0 and last(/Linux by SNMP/net.if.speed[ifHighSpeed.{#SNMPINDEX}])>0 and ( last(/Linux by SNMP/net.if.type[ifType.{#SNMPINDEX}])=6 or last(/Linux by SNMP/net.if.type[ifType.{#SNMPINDEX}])=7 or last(/Linux by SNMP/net.if.type[ifType.{#SNMPINDEX}])=11 or last(/Linux by SNMP/net.if.type[ifType.{#SNMPINDEX}])=62 or last(/Linux by SNMP/net.if.type[ifType.{#SNMPINDEX}])=69 or last(/Linux by SNMP/net.if.type[ifType.{#SNMPINDEX}])=117 ) and (last(/Linux by SNMP/net.if.status[ifOperStatus.{#SNMPINDEX}])<>2)`|Info|**Manual close**: YesDiscovering interfaces from IF-MIB and EtherLike-MIB. Interfaces with up(1) Operational Status are discovered.
|Dependent item|net.if.duplex.discovery**Preprocessing**
SNMP walk to JSON
Discard unchanged with heartbeat: `1h`
MIB: EtherLike-MIB
The current mode of operation of the MAC
entity. 'unknown' indicates that the current
duplex mode could not be determined.
Management control of the duplex mode is
accomplished through the MAU MIB. When
an interface does not support autonegotiation,
or when autonegotiation is not enabled, the
duplex mode is controlled using
ifMauDefaultType. When autonegotiation is
supported and enabled, duplex mode is controlled
using ifMauAutoNegAdvertisedBits. In either
case, the currently operating duplex mode is
reflected both in this object and in ifMauType.
Note that this object provides redundant
information with ifMauType. Normally, redundant
objects are discouraged. However, in this
instance, it allows a management application to
determine the duplex status of an interface
without having to know every possible value of
ifMauType. This was felt to be sufficiently
valuable to justify the redundancy.
Reference: [IEEE 802.3 Std.], 30.3.1.1.32,aDuplexStatus.
|Dependent item|net.if.duplex[dot3StatsDuplexStatus.{#SNMPINDEX}]**Preprocessing**
SNMP walk value: `1.3.6.1.2.1.10.7.2.1.19.{#SNMPINDEX}`
Please check autonegotiation settings and cabling
|`last(/Linux by SNMP/net.if.duplex[dot3StatsDuplexStatus.{#SNMPINDEX}])=2`|Warning|**Manual close**: Yes| ## Feedback Please report any issues with the template at [`https://support.zabbix.com`](https://support.zabbix.com) You can also provide feedback, discuss the template, or ask for help at [`ZABBIX forums`](https://www.zabbix.com/forum/zabbix-suggestions-and-feedback)