The alarm system

Alarm categories

Criticism	Alarma	Description	Reaction
Critical	ePDG_Service_Down, ePDG_High_Attach_Failure_Rate, ePDG_PGW_Unreachable, ePDG_AAA_Unreachable, ePDG_Diameter_Watchdog_Timeout	Component is unavailable, widespread connection failures, nodes are unavailable	Immediate escalation: Email + SNMP Trap + Webhook. Repeat every hour
Warning	ePDG_High_IKEv2_Latency, ePDG_High_GTP_Latency, ePDG_High_IKEv2_Error_Rate, ePDG_High_GTP_Error_Rate, ePDG_High_Memory_Usage, ePDG_High_CPU_Usage, ePDG_Low_Disk_Space, ePDG_High_Error_Log_Rate	Performance degradation, resource anomalies	Email. Resend every 4 hours. Suppressed if a “Critical” status is present on the same component

Complete list of alarms (20+ rules)

Alarm treatment process

Features

Inhibition: Critical alarms automatically suppress Warning for the same component

Grouping: Alarms are grouped into alertname + component with a 30-second window

Dead time / Hysteresis: 1 to 10 minutes for prevents false positives

Trap pairing: raise/clear simultaneous events for compliance with RFC 3877 ALARM-MIB