The CoPilot Notifications page enables you to configure alerts so that you can
be notified about changes in your Aviatrix transit network, see all triggered
alerts, pause alerts, and set preferred notification channels for receiving
alerts.
Working with Notifications
You access Notifications in CoPilot from Monitor > Notifications or by typing
Notifications in the navigation search.
CoPilot alerts now aggregate exclusively on the main node. Performance data graphs continue to display data per node, with no support for aggregated views across nodes. This change does not affect Controller or Gateway alerts.
When alert conditions are met for a metric, Copilot records the event in the Monitor > Notifications > Alerts page. This page is a tabular view of Aviatrix platform triggered alerts, with search and filter capability.
How you set a condition threshold to trigger an alert depends on different
factors. Work with your network operations team to determine the metric
conditions that will trigger alerts in your environment. For example, for system
metrics, the instance size can influence what condition threshold makes sense.
For metrics associated with cloud provider-maintained infrastructure, the
desired condition threshold may vary between cloud service providers.
Alerts can be based on events such as changes in telemetry data for managed
resources. For example, you can receive a notification when the total memory of
a gateway instance falls below a specified threshold. The alerts can also be
based on the status of a resource or connection. For example, when a gateway or
gateway connection goes from an up to down status. See
Configuring Alerts.
CoPilot supports webhook alerts. Webhooks allow you to send notifications to
third-party automation systems such as Slack. You can send a webhook to any
system that can take an HTTPS callback. A single alert can notify multiple
systems/people. For information on how to customize the webhooks CoPilot
generates, see
Setting Up Webhook Channels for Sending Alert Notifications.
You can pause alerts. You may want to pause alerts before performing maintenance
tasks on the network that will trigger pre-configured alerts and then unpause
them when the maintenance is complete. See
Pausing Alerts.
In Monitor > Notifications, CoPilot lists all alerts and shows if they are in
a triggerd (open) or closed state. You can open an alert from the list to view
its lifecycle. CoPilot closes the alert automatically when the alert metric no
longer meets the condition to trigger the alert. The alert lifecycle provides a
history for every alert that happens in your network environment. See
Viewing Alert Notifications.
See also
CoPilot Notifications Page Reference
for descriptions of each tab available under Notifications and the views they
provide.
About Metrics used for Triggering Notifications
For Aviatrix Controller and Aviatrix gateways, you can configure alerts to be
notified to events that occur in your network such as performance bottlenecks or
other problems. You configure alerts and the channels to be notified using the
notifications feature in Aviatrix Copilot. For information about the system and
network metrics on which notifications can be based, see Metrics Monitored for Aviatrix
Resources.
CoPilot Alert Condition Display Names
You can see a list of all alert condition display names shown by CoPilot in Metrics Monitored for Aviatrix
Resources.
Many of the alerts are associated with detecting changes in resource utilization
(telemetry) data for managed resources.
Some alerts are associated with enhanced security services such as detecting
network anomalies or detecting threat IPs identified by a well known threat-IP
source.
Underlay Connection Status Alert
The Underlay Connection Status alert indicates a potential underlay
communication issue. Potential causes of this alert include the following:
- A CSP link outage.
- A misconfigured security group or ACL.
- A firewall blocking traffic.
- A router dropping packets.
This alert applies to connections between hosts running Aviatrix gateways.
Monitored hosts will alert on syslog traffic where it is the source or the
destination
When you set this alert for a host(s), CoPilot monitors the syslog from any
connection that includes the host as the source or destination. When syslog data
indicates a potential problem from each direction of the connection between that
host and another host within 30 seconds of the other, the alert is triggered. On
the same connection, if the syslog data later indicates the problem is resolved
from either direction, the alert is automatically resolved.