IDPS Engine Network Utilization Very High Alarm

Products

• VMware NSX

Issue/Introduction

Title: Alarm for IDPS Engine Network Utilization Very High
Event ID: distributed_ids_ips.idps_engine_network_oversubscription_very_high

Alarm Description

• Purpose:Network Utilization for IDPS engine is very high
• Impact: There is no visible impact. This alarm is only to alert that the IDPS engine is at or has crossed the very high threshold for Network Utilization.

 

Environment

VMware NSX

Resolution

Steps to Resolve

For 4.0.0 and higher

 

Recommendations: 

 

Review reason for oversubscription. Review the IDPS rules to reduce the amount of traffic being subject to IDPS service.