Hey guys,<br><br>I am using rrdtool with aberrant behavior enabled to monitor the traffic going through our routers, for HWPREDICT, I just choose the "default" 0.1 alpha setting, according to the document, that means the most recent hour's data accounts for 75% of the baseline prediction.
<br><br>Everything runs pretty good, and whenever there is a huge traffic spike (thus the observed value falls outside the confidence band), there will be an alert.<br><br>But I noticed if the spike persist for a while, seems rrdtool will adopt the new traffic pattern quickly, the baseline and confidence band will go up with the spike and a little while there will be no alert (since now rrdtool thinks this is the normal traffic), even the spike is still ongoing.
<br><br>So anyone here has similar experience? what is your method to deal with this kind of problem?<br><br>adjusting the alpha value to a smaller value?<br><br>Any input is highly appreciated!<br><br>Joh<br>