Flap detection based on time period instead of check count.

[Larry Low]

When setting up services that heavily rely on passive checks (only active
monitor every 60 minutes or 12 hours, etc) it would be nice to base flap
detection on state changes over a time period instead of the count of
checks.

Example:

Interface status actively checked every 4 hours.
0:00 - Active Check OK
1:20 - Passive check causes CRTIICAL state.
1:25 - Passive check causes OK state.
4:00 - Active Check OK
8:00 - Active Check OK
9:29 - Passive check causes CRITICAL state.
10:00 - Passive check casues OK state.

State change in this case is 5/7 (57%).
If based on a time period of minutes you get 5/600 (.008%).

Just an idea to allow for passive monitoring to be better handled with flap
detection.

----
Larry Low
4150 N Drinkwater Blvd., 5th Floor
Scottsdale, AZ  85251
E-mail: llow at telesphere.com'

Telesphere Networks, Inc




-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/