Skip to content

docs: document watcher node-flag events (overload/attached/ABR/ASBR) #73

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Vadims06 wants to merge 1 commit into
base: master
Choose a base branch
from
Open

docs: document watcher node-flag events (overload/attached/ABR/ASBR) #73

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions docs/monitoring/isis-watcher.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,8 @@ containers.
- IS-IS networks **appearing/disappearing**
- IS-IS **TE attributes**: administrative group, maximum link bandwidth, maximum
reservable bandwidth, unreserved bandwidth, and TE default metric
- IS-IS **node flags**: **overload** and **attached** bits, plus **ABR/ASBR**
role — a `node,changed` event is logged per flag transition

Everything is grouped by **IS-IS level (L1/L2)** on the timeline:

Expand Down
11 changes: 11 additions & 0 deletions docs/monitoring/ospf-watcher.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,8 @@ starts fast.
- OSPF **TE attributes** (via opaque LSA or BGP-LS): administrative group,
maximum link bandwidth, maximum reservable bandwidth, unreserved bandwidth, and
TE default metric
- OSPF **node role flags**: a router becoming or ceasing to be an **ABR** or
**ASBR** (Router-LSA B/E bits) — a `node,changed` event is logged per transition

![OSPF monitoring — new subnet event](../assets/ospf_monitoring_new_subnet.png)

Expand Down Expand Up @@ -81,6 +83,15 @@ A metric-change event:
> `10.10.10.1` detected that the metric of internal stub network
> `192.168.13.0/24` changed from `10` to `12`.

A node-flag change event:

```text
2023-01-01T00:00:00Z,demo-watcher,node,10.10.10.1,changed,attr:abr,old:0,new:1,10.10.10.1,01Jan2023_00h00m00s_7_hosts,0,1234
```

> Router `10.10.10.1` started acting as an **ABR** (`abr` flag `0` → `1`). One
> event is emitted per changed flag.

These records are what Logstash/Fluent Bit forward to
[ELK](elk-kibana.md), [Zabbix](zabbix.md) and [Webhooks](webhooks.md).

Expand Down