RRDtool Specific Features

Cacti supports most RRDtool features. In this chapter, many of those features, and some Cacti implementation specifics around them will be discussed. As RRDtool is a continually changing Times Series Database (TSDB) and Graph rendering framework, this guide may be a little behind on all the RRDtool features that Cacti supports.

Database Data Types

There are several different Database Data Types that RRDfile supports. They include all those listed below. Cacti claims to support all, but COMPUTE remains untested.

Type Supported Description
GAUGE Yes This is as the term refers to a floating point number that tracks the value reported directly. Unlike the COUNTER, it has not comprehension of past data.
COUNTER Yes This is a floating point number that tracks the different between samples to come up with effectively a rate calculation. Used for things like Traffic Graphs where the number reported in SNMP continually increases
DCOUNTER Yes This is the same as a COUNTER, but in Double Precision.
DERIVE Yes This data type measures the Rate of Change of a value, otherwise known as the first derivative to the value. As such, it relies on previous data in order to report the change.
DDERIVE Yes This is the same as the DERIVE, but in Double Precision
ABSOLUTE Yes Is for counters that get reset upon reading. This is often used for fast counters. It is also similar to the DERIVE, or acts very much like it.
COMPUTE Yes Though Cacti claims to support this Data Type. It's not clear that it's presently working.

NOTE: Presently Holt-Winters Forecasting is not supported in Cacti and The Cacti Group has no plans on supporting it. If you would like Holt-Winters Forecasting supported in Cacti, you will need to submit a pull request including documentation if you require it's functionality.

GPRINT Presets

A GPRINT is a graph item type that enables you to print the values of data sources on a graph. They are typically used to represent legend values on the graph. The output format of these numbers are controlled by a printf-like format string. Cacti enables you to keep a global list of these strings that can be applied to any graph item throughout Cacti. You can see the list of available formats described on the RRDtool Website.

Creating a GPRINT Preset

To create a new GPRINT preset, select the Graph Management menu item under the Management heading, and select GPRINT Presets. Click Add to the right and you will be presented with an edit page containing two fields. Enter a name for your GPRINT preset, and the actual printf-like string in the GPRINT Text field. When you are finished, click the Create button to create your new GPRINT preset.

In the image below, you can see the default GPRINT Presets included in the base Cacti. These generally cover just about all use cases presently.

Default Cacti GPRINT's

CDEF's

CDEF's allow you to apply mathematical functions to graph data to alter output. The concept of a CDEF comes straight from RRDtool, and are written in reverse polish notation (RPN). For more information regarding the syntax of CDEF's, check out the CDEF tutorial.

From the image below, you can see that Cacti provides a rich set of CDEF's out of the box. These CDEF's can be imported and exported and are globally assigned for portability.

Default Cacti CDEF's

Creating a CDEF

To create a new CDEF in Cacti, select CDEF's under Console > Presets sub-menu section. Once at this screen, click Add to the right. You will be prompted for a CDEF name, for which you can type anything used to describe your CDEF. Click the Create button so you are redirected back to the edit page, now with an empty CDEF Items box. Construct your CDEF by adding an item for each element in the CDEF string, common types such as operators and functions are enumerated for your convenience. Below is a basic description of each CDEF item type. You can see from the image below that CDEF's follow a Reverse Polish Notation (RPN), which was a very popular way of computing back in the 70's and 80's when computing devices had much less memory. However, RPN is elegant in it's simplicity.

Default Cacti CDEF Example

Table 19-1. CDEF Item Types

Cacti provides several CDEF Item Types to represent a Data Source in order to provide additional functionality. See below for the documentation. Cacti presently does not allow you to specify a VNAME for your DEFS, CDEF's and VDEF's, but instead uses a string pattern to assign them. You will have to take note of then when creating a Graph Template. Those Special Data Source types are documented below in the next few sections.

Type Description
Function You can choose a CDEF function to use as the item. The RRDtool's graph manual describes the purpose of each CDEF function.
Operator Just your standard math operators, including modulo (%).
Special Data Source A special data source is basically a flag to tell Cacti to do some special processing when it encounters this CDEF item. The "Current Graph Item Data Source" type basically inserts the name of the data source that is referenced by the graph item that references to this CDEF. Both of the "All Data Sources" types insert a summation of all data sources used on a graph.
Another CDEF You can recursively use another CDEF within this CDEF.
Custom String Sometimes it's just easier to type out the literal CDEF string manually. When referencing to data sources on the graph, remember that Cacti names them 'a', 'b', 'c', '...', starting with the first data source on the graph.

VDEF's

VDEF's provide greater functionality then their ancestor CDEF's and may be able to replace some legacy Cacti functionality like Nth Percentile Graph Template logic. They should be used whenever possible for your Graph Templates.

You can see from the image below, that 95th percentile and total bandwidth could be replace by using one of the VDEF's below.

Default Cacti VDEF's

Creating a VDEF

To create a new VDEF in Cacti, select VDEF's under Console > Presets sub-menu section. Once at this screen, click Add to the right. You will be prompted for a VDEF name, for which you can type anything used to describe your VDEF. Click the Create button so you are redirected back to the edit page, now with an empty VDEF Items box. Construct your VDEF by adding an item for each element in the VDEF string, common types such as operators and functions are enumerated for your convenience. Below is a basic description of each VDEF item type. The image below shows an example VDEF for the Bandwidth type VDEF.

Default Cacti VDEF Example

For additional information on CDEF's and VDEF's see that specific section of the documentation. Additionally, you can find examples on the RRDtool Website

Special Data Sources

The Special Data Source selection introduces some variables not known to plain vanilla RRDtool. Let's spend some few words of them to unleash their power.

Table 19-2. CDEF Special Data Source
Special Data Source Description
Current Graph Item Data Source Will be replaced by the DEF name of the RRDtool data source referred by the graph item this CDEF is associated to.
All Data Sources (Don't Include Duplicates) Will add up all data sources of the whole graph to form a total. A data source that appears more than once will be counted only once. Data sources that differ by consolidation functions only are NOT counted as different data sources (e.g. traffic_in:AVERAGE and traffic_in:MAX are counted only once). It is NOT required to associate the graph item to any data source!
All Data Sources (Include Duplicates) Will add up all data sources of the whole graph to form a total. A data source that appears more than once will be counted for each time of it's appearance. Data sources that differ by consolidation functions only are NOT counted as different data sources (e.g. traffic_in:AVERAGE and traffic_in:MAX are counted only once). It is NOT required to associate the graph item to any data source!
Similar Data Sources (Don't Include Duplicates) It is REQUIRED to associate the graph item to the data source that shall be totaled! Let's assume the data source is named "traffic_in". Then, cacti will add up all data sources "traffic_in" of the whole graph to form a data source specific total (e.g. Total traffic In). Data sources with different consolidation functions are counted as same data sources (e.g. traffic_in:AVERAGE and traffic_in:MAX are counted once)
Similar Data Sources (Include Duplicates) It is REQUIRED to associate the graph item to the data source that shall be totaled! If a data source appears multiple times, it will be added this many times.
Current Data Source Item: Minimum Value Taken from the Data Template - Data Source Item related to this graph item: fetches the minimum value defined for the given data template. Caution: This is NOT the smallest entry of the given data source!
Current Data Source Item: Maximum Value Taken from the Data Template - Data Source Item related to this graph item: fetches the maximum value defined for the given data template. Caution: This is NOT the highest entry of the given data source!
Graph: Lower Limit Taken from the Graph Template: fetches the Lower Limit defined to the Graph Template. This is independent of all --alt-autoscaling options. It is NOT the dynamically determined lower boundary of the graph!
Graph: Upper Limit Taken from the Graph Template: fetches the Upper Limit defined to the Graph Template. This is independent of all --alt-autoscaling options. It is NOT the dynamically determined upper boundary of the graph!
Count of All Data Sources (Don't Include Duplicates) Will count the number of all data sources of the whole graph. A data source that appears more than once will be counted only once. Data sources that differ by consolidation functions only are NOT counted as different data sources (e.g. traffic_in:AVERAGE and traffic_in:MAX are counted only once). It is NOT required to associate the graph item to any data source!
Count of All Data Sources (Include Duplicates) Will count the number of all data sources of the whole graph. A data source that appears more than once will be counted for each time of it's appearance. Data sources that differ by consolidation functions only are NOT counted as different data sources (e.g. traffic_in:AVERAGE and traffic_in:MAX are counted only once). It is NOT required to associate the graph item to any data source!
Count of Similar Data Sources (Don't Include Duplicates) It is REQUIRED to associate the graph item to the data source that shall be counted! Let's assume the data source is named "traffic_in". Then, cacti will count all data sources "traffic_in" of the whole graph. Data sources with different consolidation functions are counted as same data sources (e.g. traffic_in:AVERAGE and traffic_in:MAX are counted once)
Count of Similar Data Sources (Include Duplicates) It is REQUIRED to associate the graph item to the data source that shall be counted! If a data source appears multiple times, it will be counted this many times.

While the All Data Sources/Similar Data Sources pseudo CDEF variables perform totaling, the Count All Data Sources/Count Similar Data Sources pseudo CDEF Variables simply count the occurrences of the related data sources. Thus, it is easy to compute e.g. an average of all similar data sources by creating the CDEF:

CDEF=SIMILAR_DATA_SOURCES_NODUPS,COUNT_SIMILAR_DS_NODUPS,/

Using Special Data Source

Let's have some examples:

This is the list of graph items defined. Please note, that Item numbers 17-20 are duplicates of Item numbers 1-4. Even if it usually does not make sense, for this discussion it is very valuable. Item numbers 21-24 are related to a cdef=ALL_DATA_SOURCES_NODUPS.

Graph Item Data Source Graph Item Type CF Type
Item # 1 (traffic_in): 1. Target Traffic In LINE1 AVERAGE
Item # 2 (traffic_in): Current: GPRINT LAST
Item # 3 (traffic_in): Average: GPRINT AVERAGE
Item # 4 (traffic_in): Maximum:[HR] GPRINT MAX
Item # 5 (traffic_in): 2. Target Traffic In LINE1 AVERAGE
Item # 6 (traffic_in): Current: GPRINT LAST
Item # 7 (traffic_in): Average: GPRINT AVERAGE
Item # 8 (traffic_in): Maximum:[HR] GPRINT MAX
Item # 9 (traffic_out): 1. Target Traffic Out LINE1 AVERAGE
Item # 10 (traffic_out): Current: GPRINT LAST
Item # 11 (traffic_out): Average: GPRINT AVERAGE
Item # 12 (traffic_out): Maximum:[HR] GPRINT MAX
Item # 13 (traffic_out): 2. Target Traffic Out LINE1 AVERAGE
Item # 14 (traffic_out): Current: GPRINT LAST
Item # 15 (traffic_out): Average: GPRINT AVERAGE
Item # 16 (traffic_out): Maximum:[HR] GPRINT MAX
Item # 17 (traffic_in): 1. Target Again Traffic In LINE1 AVERAGE
Item # 18 (traffic_in): Current: GPRINT LAST
Item # 19 (traffic_in): Average: GPRINT AVERAGE
Item # 20 (traffic_in): Maximum:[HR] GPRINT MAX
Item # 21 (No Task): AllDsNoDups LINE1 AVERAGE
Item # 22 (No Task): Current: GPRINT LAST
Item # 23 (No Task): Average: GPRINT AVERAGE
Item # 24 (No Task): Maximum:[HR] GPRINT MAX

And this is the rrd graph statement:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="Traffic AllDsNoDups" \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="" \
--slope-mode \
--font TITLE:12: \
--font AXIS:8: \
--font LEGEND:8: \
--font UNIT:8: \
DEF:a="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:AVERAGE \
DEF:b="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:MAX \
DEF:c="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:AVERAGE \
DEF:d="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:MAX \
DEF:e="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:AVERAGE \
DEF:f="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:MAX \
DEF:g="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:AVERAGE \
DEF:h="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:MAX \
CDEF:cdefca=TIME,1202925514,GT,a,a,UN,0,a,IF,IF,TIME,1202925514,GT,c,c,UN,0,c,IF,IF,TIME,1202925514,GT,e,e,UN,0,e,IF,IF,TIME,1202925514,GT,g,g,UN,0,g,IF,IF,+,+, \
LINE1:a#FFFF00FF:"1. Target Traffic In" \
GPRINT:a:LAST:"   Current:%8.2lf%s" \
GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
LINE1:c#FFD660FF:"2. Target Traffic In" \
GPRINT:c:LAST:"     Current:%8.2lf%s" \
GPRINT:c:AVERAGE:"Average:%8.2lf%s" \
GPRINT:d:MAX:"Maximum:%8.2lf%sn" \
LINE1:e#CAF100FF:"1. Target Traffic Out" \
GPRINT:e:LAST:"   Current:%8.2lf%s" \
GPRINT:e:AVERAGE:"Average:%8.2lf%s" \
GPRINT:f:MAX:"Maximum:%8.2lf%sn" \
LINE1:g#CCBB00FF:"2. Target Traffic Out" \
GPRINT:g:LAST:"     Current:%8.2lf%s" \
GPRINT:g:AVERAGE:"Average:%8.2lf%s" \
GPRINT:h:MAX:"Maximum:%8.2lf%sn" \
LINE1:a#FF0000FF:"1. Target Again Traffic In" \
GPRINT:a:LAST:"Current:%8.2lf%s" \
GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
LINE1:cdefca#000000FF:"AllDsNoDups" \
GPRINT:cdefca:LAST:"        Current:%8.2lf%s" \
GPRINT:cdefca:AVERAGE:"Average:%8.2lf%s" \
GPRINT:cdefca:MAX:"Maximum:%8.2lf%sn"

The data sources are denoted by the letters a to h. cdefca represents the important part. You surely notice, that all data sources using consolidation function AVERAGE are taken into account while MAX is skipped. Please pay attention to the data source denoted by a. Even though the data source appears twice, the cdef shows it only once. This is due to the duplicate suppression.

This is the list of graph items defined. Please note, that Item numbers 17-20 are duplicates of Item numbers 1-4. Even if it usually does not make sense, for this discussion it is very valuable. Item numbers 21-24 are related to a cdef=ALL_DATA_SOURCES_DUPS

Graph Item Data Source Graph Item Type CF Type
Item # 1 (traffic_in): 1. Target Traffic In LINE1 AVERAGE
Item # 2 (traffic_in): Current: GPRINT LAST
Item # 3 (traffic_in): Average: GPRINT AVERAGE
Item # 4 (traffic_in): Maximum:[HR] GPRINT MAX
Item # 5 (traffic_in): 2. Target Traffic In LINE1 AVERAGE
Item # 6 (traffic_in): Current: GPRINT LAST
Item # 7 (traffic_in): Average: GPRINT AVERAGE
Item # 8 (traffic_in): Maximum:[HR] GPRINT MAX
Item # 9 (traffic_out): 1. Target Traffic Out LINE1 AVERAGE
Item # 10 (traffic_out): Current: GPRINT LAST
Item # 11 (traffic_out): Average: GPRINT AVERAGE
Item # 12 (traffic_out): Maximum:[HR] GPRINT MAX
Item # 13 (traffic_out): 2. Target Traffic Out LINE1 AVERAGE
Item # 14 (traffic_out): Current: GPRINT LAST
Item # 15 (traffic_out): Average: GPRINT AVERAGE
Item # 16 (traffic_out): Maximum:[HR] GPRINT MAX
Item # 17 (traffic_in): 1. Target Again Traffic In LINE1 AVERAGE
Item # 18 (traffic_in): Current: GPRINT LAST
Item # 19 (traffic_in): Average: GPRINT AVERAGE
Item # 20 (traffic_in): Maximum:[HR] GPRINT MAX
Item # 21 (No Task): AllDsDups LINE1 AVERAGE
Item # 22 (No Task): Current: GPRINT LAST
Item # 23 (No Task): Average: GPRINT AVERAGE
Item # 24 (No Task): Maximum:[HR] GPRINT MAX

And this is the rrd graph statement:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="Traffic AllDsDups" \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="" \
--slope-mode \
--font TITLE:12: \
--font AXIS:8: \
--font LEGEND:8: \
--font UNIT:8: \
DEF:a="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:AVERAGE \
DEF:b="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:MAX \
DEF:c="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:AVERAGE \
DEF:d="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:MAX \
DEF:e="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:AVERAGE \
DEF:f="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:MAX \
DEF:g="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:AVERAGE \
DEF:h="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:MAX \
CDEF:cdefca=TIME,1202925583,GT,a,a,UN,0,a,IF,IF,TIME,1202925583,GT,c,c,UN,0,c,IF,IF,TIME,1202925583,GT,e,e,UN,0,e,IF,IF,TIME,1202925583,GT,g,g,UN,0,g,IF,IF,TIME,1202925583,GT,a,a,UN,0,a,IF,IF,+,+,+,+ \
LINE1:a#FFFF00FF:"1. Target Traffic In" \
GPRINT:a:LAST:"      Current:%8.2lf%s" \
GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
LINE1:c#FFD660FF:"2. Target Traffic In" \
GPRINT:c:LAST:"      Current:%8.2lf%s" \
GPRINT:c:AVERAGE:"Average:%8.2lf%s" \
GPRINT:d:MAX:"Maximum:%8.2lf%sn" \
LINE1:e#CAF100FF:"1. Target Traffic Out" \
GPRINT:e:LAST:"     Current:%8.2lf%s" \
GPRINT:e:AVERAGE:"Average:%8.2lf%s" \
GPRINT:f:MAX:"Maximum:%8.2lf%sn" \
LINE1:g#CCBB00FF:"2. Target Traffic Out" \
GPRINT:g:LAST:"     Current:%8.2lf%s" \
GPRINT:g:AVERAGE:"Average:%8.2lf%s" \
GPRINT:h:MAX:"Maximum:%8.2lf%sn" \
LINE1:a#FF0000FF:"1. Target Again Traffic In" \
GPRINT:a:LAST:"Current:%8.2lf%s" \
GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
LINE1:cdefca#000000FF:"AllDsDups" \
GPRINT:cdefca:LAST:"             Current:%8.2lf%s" \
GPRINT:cdefca:AVERAGE:"Average:%8.2lf%s" \
GPRINT:cdefca:MAX:"Maximum:%8.2lf%sn"

Again, the data sources are denoted by the letters a to h and cdefca represents the important part. Please pay attention to the data source denoted by a appearing twice in this cdef. This is, because it appears twice (Item numbers 17-20) in the graph item list and duplicate suppression is not in effect.

Everything is very much like the above; again Item numbers 17-20 are duplicates of Item numbers 1-4. Item numbers 21-24 are related to a cdef=SIMILAR_DATA_SOURCES_NODUPS and are associated with the data source traffic_in of the 1. target (it does not matter, which target is chosen, as long as you only choose a traffic_in data source)

Graph Item Data Source Graph Item Type CF Type
Item # 1 (traffic_in): 1. Target Traffic In LINE1 AVERAGE
Item # 2 (traffic_in): Current: GPRINT LAST
Item # 3 (traffic_in): Average: GPRINT AVERAGE
Item # 4 (traffic_in): Maximum:[HR] GPRINT MAX
Item # 5 (traffic_in): 2. Target Traffic In LINE1 AVERAGE
Item # 6 (traffic_in): Current: GPRINT LAST
Item # 7 (traffic_in): Average: GPRINT AVERAGE
Item # 8 (traffic_in): Maximum:[HR] GPRINT MAX
Item # 9 (traffic_out): 1. Target Traffic Out LINE1 AVERAGE
Item # 10 (traffic_out): Current: GPRINT LAST
Item # 11 (traffic_out): Average: GPRINT AVERAGE
Item # 12 (traffic_out): Maximum:[HR] GPRINT MAX
Item # 13 (traffic_out): 2. Target Traffic Out LINE1 AVERAGE
Item # 14 (traffic_out): Current: GPRINT LAST
Item # 15 (traffic_out): Average: GPRINT AVERAGE
Item # 16 (traffic_out): Maximum:[HR] GPRINT MAX
Item # 17 (traffic_in): 1. Target Again Traffic In LINE1 AVERAGE
Item # 18 (traffic_in): Current: GPRINT LAST
Item # 19 (traffic_in): Average: GPRINT AVERAGE
Item # 20 (traffic_in): Maximum:[HR] GPRINT MAX
Item # 21 (traffic_in): SimilarDsNoDups LINE1 AVERAGE
Item # 22 (traffic_in): Current: GPRINT LAST
Item # 23 (traffic_in): Average: GPRINT AVERAGE
Item # 24 (traffic_in): Maximum:[HR] GPRINT MAX

And this is the rrd graph statement:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="Traffic SimilarDsNoDups" \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="" \
--slope-mode \
--font TITLE:12: \
--font AXIS:8: \
--font LEGEND:8: \
--font UNIT:8: \
DEF:a="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:AVERAGE \
DEF:b="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:MAX \
DEF:c="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:AVERAGE \
DEF:d="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:MAX \
DEF:e="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:AVERAGE \
DEF:f="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:MAX \
DEF:g="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:AVERAGE \
DEF:h="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:MAX \
CDEF:cdefca=TIME,1202924474,GT,a,a,UN,0,a,IF,IF,TIME,1202924474,GT,c,c,UN,0,c,IF,IF,+ \
CDEF:cdefcd=TIME,1202924474,GT,b,b,UN,0,b,IF,IF,TIME,1202924474,GT,d,d,UN,0,d,IF,IF,+ \
LINE1:a#FFFF00FF:"1. Target Traffic In" \
GPRINT:a:LAST:"    Current:%8.2lf%s" \
GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
LINE1:c#FFD660FF:"2. Target Traffic In" \
GPRINT:c:LAST:"      Current:%8.2lf%s" \
GPRINT:c:AVERAGE:"Average:%8.2lf%s" \
GPRINT:d:MAX:"Maximum:%8.2lf%sn" \
LINE1:e#CAF100FF:"1. Target Traffic Out" \
GPRINT:e:LAST:" \
Current:%8.2lf%s" \
GPRINT:e:AVERAGE:"Average:%8.2lf%s" \
GPRINT:f:MAX:"Maximum:%8.2lf%sn" \
LINE1:g#CCBB00FF:"2. Target Traffic Out" \
GPRINT:g:LAST:"     Current:%8.2lf%s" \
GPRINT:g:AVERAGE:"Average:%8.2lf%s" \
GPRINT:h:MAX:"Maximum:%8.2lf%sn" \
LINE1:a#FF0000FF:"1. Target Again Traffic In" \
GPRINT:a:LAST:"Current:%8.2lf%s" \
GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
LINE1:cdefca#000000FF:"SimilarDsNoDups" \
GPRINT:cdefca:LAST:"           Current:%8.2lf%s" \
GPRINT:cdefca:AVERAGE:"Average:%8.2lf%s" \
GPRINT:cdefcd:MAX:"Maximum:%8.2lf%sn"

cdefca calculates the SUM of all traffic_in data sources, but pays attention only to consolidation function AVERAGE. Duplicate suppression makes sure, that the second occurrence of the 1. target is not taken into account. So it's only summing data source a and c. cdefca is used the the LINE1 graph item with exact match for consolidation function AVERAGE as well as for the best matched consolidation functions LAST and MIN.

cdefcd calculates the SUM of all traffic_in data sources, but pays attention only to consolidation function MAX. Again, duplicate suppression is in effect. So it's only summing data source b and d. cdefcd is used for the graph item with exact match for consolidation function MAX only. This is, because my rra settings only define AVERAGE and MAX, where LAST and MIN are omitted. This may differ for installations defining LAST and MIN as well.

Again, please note, that Item numbers 17-20 are duplicates of Item numbers 1-4. Item numbers 21-24 are related to a cdef=SIMILAR_DATA_SOURCES_DUPS and are associated with the data source traffic_in of the 1 target (it does not matter, which target is chosen, as long as you only choose a traffic_in data source)

Graph Item Data Source Graph Item Type CF Type
Item # 1 (traffic_in): 1. Target Traffic In LINE1 AVERAGE
Item # 2 (traffic_in): Current: GPRINT LAST
Item # 3 (traffic_in): Average: GPRINT AVERAGE
Item # 4 (traffic_in): Maximum:[HR] GPRINT MAX
Item # 5 (traffic_in): 2. Target Traffic In LINE1 AVERAGE
Item # 6 (traffic_in): Current: GPRINT LAST
Item # 7 (traffic_in): Average: GPRINT AVERAGE
Item # 8 (traffic_in): Maximum:[HR] GPRINT MAX
Item # 9 (traffic_out): 1. Target Traffic Out LINE1 AVERAGE
Item # 10 (traffic_out): Current: GPRINT LAST
Item # 11 (traffic_out): Average: GPRINT AVERAGE
Item # 12 (traffic_out): Maximum:[HR] GPRINT MAX
Item # 13 (traffic_out): 2. Target Traffic Out LINE1 AVERAGE
Item # 14 (traffic_out): Current: GPRINT LAST
Item # 15 (traffic_out): Average: GPRINT AVERAGE
Item # 16 (traffic_out): Maximum:[HR] GPRINT MAX
Item # 17 (traffic_in): 1. Target Again Traffic In LINE1 AVERAGE
Item # 18 (traffic_in): Current: GPRINT LAST
Item # 19 (traffic_in): Average: GPRINT AVERAGE
Item # 20 (traffic_in): Maximum:[HR] GPRINT MAX
Item # 21 (traffic_in): SimilarDsDups LINE1 AVERAGE
Item # 22 (traffic_in): Current: GPRINT LAST
Item # 23 (traffic_in): Average: GPRINT AVERAGE
Item # 24 (traffic_in): Maximum:[HR] GPRINT MAX

And this is the rrd graph statement:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="Traffic SimilarDsDups" \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="" \
--slope-mode \
--font TITLE:12: \
--font AXIS:8: \
--font LEGEND:8: \
--font UNIT:8: \
DEF:a="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:AVERAGE \
DEF:b="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:MAX \
DEF:c="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:AVERAGE \
DEF:d="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:MAX \
DEF:e="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:AVERAGE \
DEF:f="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:MAX \
DEF:g="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:AVERAGE \
DEF:h="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:MAX \
CDEF:cdefca=TIME,1202925634,GT,a,a,UN,0,a,IF,IF,TIME,1202925634,GT,c,c,UN,0,c,IF,IF,TIME,1202925634,GT,a,a,UN,0,a,IF,IF,+,+ \
CDEF:cdefcd=TIME,1202925634,GT,b,b,UN,0,b,IF,IF,TIME,1202925634,GT,d,d,UN,0,d,IF,IF,TIME,1202925634,GT,b,b,UN,0,b,IF,IF,+,+ \
LINE1:a#FFFF00FF:"1. Target Traffic In" \
GPRINT:a:LAST:"      Current:%8.2lf%s" \
GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
LINE1:c#FFD660FF:"2. Target Traffic In" \
GPRINT:c:LAST:"    Current:%8.2lf%s" \
GPRINT:c:AVERAGE:"Average:%8.2lf%s" \
GPRINT:d:MAX:"Maximum:%8.2lf%sn" \
LINE1:e#CAF100FF:"1. Target Traffic Out" \
GPRINT:e:LAST:"     Current:%8.2lf%s" \
GPRINT:e:AVERAGE:"Average:%8.2lf%s" \
GPRINT:f:MAX:"Maximum:%8.2lf%sn" \
LINE1:g#CCBB00FF:"2. Target Traffic Out" \
GPRINT:g:LAST:"   Current:%8.2lf%s" \
GPRINT:g:AVERAGE:"Average:%8.2lf%s" \
GPRINT:h:MAX:"Maximum:%8.2lf%sn" \
LINE1:a#FF0000FF:"1. Target Again Traffic In" \
GPRINT:a:LAST:"Current:%8.2lf%s" \
GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
LINE1:cdefca#000000FF:"SimilarDsDups" \
GPRINT:cdefca:LAST:Current:%8.2lf%s" \
GPRINT:cdefca:AVERAGE:"Average:%8.2lf%s" \
GPRINT:cdefcd:MAX:"Maximum:%8.2lf%sn"

cdefca and cdefcd represents the important part. You surely notice, that all data sources using consolidation function AVERAGE are taken into account for calculation cdefca, while MAX is calculated with cdefcd. Please pay attention to the data source denoted by a and b, respectively, appearing twice in those CDEFs as expected.

More CDEF Examples

This example is based on the standard data template ucd/net - Hard Drive Space. Cacti ships an associated graph template named ucd/net - Available Disk Space. Often, users complain about the fact, that this template prints free and used space as absolute figures only. But instead of knowing, that your data partition has about 10GB used space, you may be interested in the percentage used. So let's create a simple example to show the power of the recently introduced special data sources.

To make it work, we need two new CDEFs. The first one may come in useful for a bunch of different graph templates. It's named Make Current Data Source 0. On a first glance, you may wonder why this CDEF is needed. It is used for those data sources, that will be used for calculations but shall not show up themselves. Here's the definition

cdef=CURRENT_DATA_SOURCE,0,*

Now, the other one, named Current DS as Percentage of all DS

cdef=CURRENT_DATA_SOURCE,ALL_DATA_SOURCES_NODUPS,/,100,*

Here's a short discussion. The first three elements read: Take the current data source and divide it by Sum of All Data Sources (Don't include Duplicates). To form a percentage, you will have to multiply by 100. This is done by adding the elements four and five.

Now, let's build up the new graph

Graph Item Data Source Graph Item Type CF Type Item Color
Item # 1 (hdd_used): LINE1 AVERAGE
Item # 2 (hdd_free): LINE1 AVERAGE
Item # 3 (hdd_used): % Used AREA AVERAGE FF0000

Item numbers 1 and 2 in most cases will exceed the maximum percentage of 100 by magnitudes. So they are associated with the CDEF named Make Current Data Source 0 to make them zero. This adds the data sources to the graph but avoids them showing up. The pseudo-color of None is associated to both of them.

Item number 3 is associated to the data source hdd_used as we want to print the % Used of the partition. The CDEF is Current DS as Percentage of all DS, the color is set to red (FF0000).

And this is the rrd graph statement:

/usr/bin/rrdtool graph - \
--imgformat=PNG \
--start=-86400 \
--end=-300 \
--title="gandalf - Disk Space - / %used" \
--rigid \
--base=1024 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--vertical-label="Percent" \
--slope-mode \
--font TITLE:12: \
--font AXIS:8: \
--font LEGEND:8: \
--font UNIT:8: \
DEF:a="/var/www/html/cacti/rra/target1_hdd_free_236.rrd":hdd_used:AVERAGE \
DEF:b="/var/www/html/cacti/rra/target1_hdd_free_236.rrd":hdd_free:AVERAGE \
CDEF:cdefa=a,0,* \
CDEF:cdefb=b,0,* \
CDEF:cdefc=a,TIME,1203272123,GT,a,a,UN,0,a,IF,IF,TIME,1203272123,GT,b,b,UN,0,b,IF,IF,+,/,100,* \
LINE1:cdefa:"" \
LINE1:cdefb:"" \
AREA:cdefc#FF0000FF:"% Used"

cdefa and cdefb are used to make the according graph items zero. cdefc performs the percentage calculation.

You may of course add GPRINT legends as usual. If you do this for the "% Used" entry only, you will get surprising results, if your RRDfile holds either MAXIMUM, LAST and/or MINIMUM consolidation function(s). This is left as an exercise to you :)

This set of CDEFs is used to colorize the background of a graph with different colors for day, night and weekends. The CDEFs are created as usual, we will show the CDEF definition only. Examples are taken from RRDtool-users mailing list courtesy Erik de Mare. Here are the definitions

Background for Daytime

cdef=LTIME,86400,%,28800,GT,LTIME,86400,%,64800,LT,INF,UNKN,CURRENT_DATA_SOURCE,*,IF,UNKN,CURRENT_DATA_SOURCE,*,IF

Background for Nighttime

cdef=LTIME,86400,%,28800,LT,INF,LTIME,86400,%,64800,GT,INF,UNKN,CURRENT_DATA_SOURCE,*,IF,IF`

Background for Weekend

cdef=LTIME,604800,%,172800,GT,LTIME,604800,%,345600,LT,INF,UNKN,CURRENT_DATA_SOURCE,*,IF,UNKN,CURRENT_DATA_SOURCE,*,IF

The value of 86400 represents the number of seconds of a day, whereas 28800 represents 8:00, defined as the start of the day. End of the day, 64800 is assumed at 18:00. Please replace those values if required. For weekends, same logic applies.

Now, let's apply those new CDEFs to a Graph Template. For this example, I've chosen the Unix - Processes that applies to localhost only. In turn, please create three new graph items, associate the processes data source, make them AREAs, select a color and opacity. Choose the daytime, nighttime and weekend CDEF in this sequence. As a last step, move those three new graph items to the top. I've chosen opacity of 20% for Item numbers 1 to 3.

Graph Item Data Source Graph Item Type CF Type Item Color
Item # 1 (proc): AREA AVERAGE FFFF00
Item # 2 (proc): AREA AVERAGE 0000FF
Item # 3 (proc): AREA AVERAGE 2E3127
Item # 4 (proc): Running Processes AREA AVERAGE F51D30
Item # 5 (proc): Current: GPRINT LAST
Item # 6 (proc): Average: GPRINT AVERAGE
Item # 7 (proc): Maximum: GPRINT MAX

Copyright (c) 2004-2023 The Cacti Group