alert.rules.yml

groups:
  - name: detect_dead_hosts
    rules:
      - alert: DetectDeadHosts
        expr: packets_received{} offset 15s unless packets_received{}
        for: 1m
        labels:
          service: onos
          severity: error
        annotations:
          summary: Host seems down

  - name: detect_dropping_packets
    rules:
      - alert: DetectDroppingPackets
        # expr: packets_received - (packets_received offset 1m) > 10
        # expr: packets_rx_dropped - (packets_rx_dropped offset 1m) > 10
        expr: sum by (device) (packets_received) - sum by (device) (packets_received offset 1m) == 0
        for: 1m
        labels:
          service: onos
          severity: error
        annotations:
          summary: Host is dropping packets