[rrd-users] Aberrant Behavior Detection Settings

[Koaps]

Hi Vinod,

From the rrdcreate docs:

"These RRAs differ from the true consolidation functions in several ways. First, each of the RRAs is updated once for every primary data point."


Because the 14 days and 1 year data points are consolidations of the primary data points I believe the predictions will only work on the 48 hours of primary data points.

To get around that you would have to make separate rrd's for each of the time periods you want to track, issue being the files will be much larger, and take a lot longer to update, especially with prediction running and the step being 5 seconds.

You could try to use much longer steps for the other files, for instance, you have the 5 second step for the last 48 hours, a 1 minute step for the last 2 weeks, and a daily step for the last year.

It will take a very long time for prediction to actually start for the last two.

At 5 minute step it took a couple months for the predictions to settle down for me.

Unfortunately there's no simple fix.

You could store values in a database and use them to feed into a rrd for history, record ticks(out of bound values) and display them in their own graphs for monthly yearly.

Maybe Tobi has a suggestion.

-k

--- On Thu, 2/11/10, Vinod Sharma <vk.kaushik2006 at gmail.com> wrote:

> From: Vinod Sharma <vk.kaushik2006 at gmail.com>
> Subject: Re: [rrd-users] Aberrant Behavior Detection Settings
> To: "Koaps" <koaps at yahoo.com>
> Cc: rrd-users at lists.oetiker.ch
> Date: Thursday, February 11, 2010, 10:04 PM
> Thanks Koaps,
> 
> I have already gone through these details and did below
> settings. I am still confused if this is write settings as
> per my requirements. this settings gives me the lower and
> uppar band for last 48 hours only.
> 
> 
> RRA:HWPREDICT:20160:0.1:0.0035:3
> RRA:SEASONAL:288:0.1:2
> RRA:DEVPREDICT:20160:5
> RRA:DEVSEASONAL:288:0.1:2
> RRA:FAILURES:288:7:9:5
> 
> Can you please advise what should be the settings if I want
> to store information for last 
> 
> Every 5 seconds for 2 days.
> Every Minute for 14 days
> Every Day for 1 year.
> 
> Regards,
> 
> 
> 
> On Wed, Feb 10, 2010 at 12:38 AM,
> Koaps <koaps at yahoo.com>
> wrote:
> 
> Did you read these?
> 
> 
> 
> http://www.usenix.org/events/lisa00/full_papers/brutlag/brutlag_html/
> 
> http://cricket.sourceforge.net/aberrant/rrd_hw.htm
> 
> 
> 
> Pretty much tells you what you need, you can always tweak
> it the settings also.
> 
> 
> 
> -C
> 
> 
> 
> 
> 
> --- On Tue, 2/9/10, Vinod Sharma <vk.kaushik2006 at gmail.com>
> wrote:
> 
> 
> 
> > From: Vinod Sharma <vk.kaushik2006 at gmail.com>
> 
> > Subject: [rrd-users] Aberrant Behavior Detection
> Settings
> 
> > To: rrd-users at lists.oetiker.ch
> 
> > Date: Tuesday, February 9, 2010, 5:29 AM
> 
> > I am using below
> settings to create rrd
> 
> >
> 
> > Assumes step of 5. Following RRA's are created
> 
> > #       Every 5 seconds for 2 days. Step = 5/5 =
> 1.
> 
> > Count = 86400/5*2 = 34560
> 
> > #       Every Minute for 14 days. Step = 60/5 =
> 12.
> 
> > x= 86400/5/12*14 = 20160
> 
> >
> 
> > #       Every Day for 1 year. Step = 86400/5 =
> 17280
> 
> >
> 
> >
> 
> >         RRA:MAX:0.99:1:34560
> 
> >         RRA:MAX:0.99:12:20160
> 
> >         RRA:MAX:0.99:17280:365
> 
> >
> 
> >         DS:data:GAUGE:25:U:U
> 
> >
> 
> >         RRA:AVERAGE:0.99:1:34560
> 
> >
> 
> >         RRA:AVERAGE:0.99:12:20160
> 
> >         RRA:AVERAGE:0.99:17280:365
> 
> >
> 
> > Can anyone please help to configure Aberrant behavior
> 
> > detection settings.
> 
> >
> 
> >
> 
> >
> 
> >
> 
> >
> 
> > -----Inline Attachment Follows-----
> 
> >
> 
> > _______________________________________________
> 
> > rrd-users mailing list
> 
> > rrd-users at lists.oetiker.ch
> 
> > https://lists.oetiker.ch/cgi-bin/listinfo/rrd-users
> 
> >
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> -- 
> Regards,
> Vinod Kumar
> +91-9871409160
> 
>