Use cases
How network and infrastructure teams put GridNMS to work day to day.
Multi-site networks
One pane of glass across every site
You run dozens of branches or campuses, each with its own switches, firewalls, and APs. GridNMS discovers and monitors them all from one place, organized by site, with role-based access so each team sees what it owns. When a site's uplink drops, the graph shows exactly what went dark with it.
- Discovery + device classes keep every site's inventory current.
- One collector per site, outbound-only, no inbound ports to open.
- Sites and RBAC scope access per team.
interface gi0/1 · in_bps ▁▂▃▅▆█ 92% of 1G → event: link saturation (major) → alerted before tickets
Capacity & performance
Catch a saturated uplink before users do
A backup job pins a WAN link every night and calls start the next morning. With per-interface thresholds and metric detections, GridNMS opens an event the moment utilization crosses your line, so you size the circuit or shift the schedule before anyone files a ticket.
- Per-interface thresholds on traffic, errors, and utilization.
- Breaches open an event and clear themselves on recovery.
- Rates and trends are computed server-side, ready to chart.
Incident response
Find the root cause in seconds, not pages
A distribution switch fails and forty alerts fire at once. Instead of a wall of noise, GridNMS shows one root cause on the topology graph with everything downstream highlighted, and folds the related events into a single case. You fix the box, not the symptoms.
- Graph correlation shows the blast radius instantly.
- Case rules group the storm into one alert with full context.
- Flap suppression keeps a recovering link from re-paging.
rule repeated_auth_failure { events: $e.message ~= "failed login" condition: #e > 10 over 5m }
Security & compliance
Turn logs and metrics into security signal
Repeated SSH failures on a core router, an unexpected config change, a sudden CPU spike. GridNMS runs YARA-L detections across both your logs and your telemetry, so the same rule language that watches syslog also watches metrics, and every hit becomes a prioritized event with an audit trail.
- One detection language for logs and metrics.
- Scheduled for coverage or streaming for instant signal.
- Field extraction and log search for investigation.
Tool consolidation
Replace a legacy NMS and a pile of scripts
Monitoring lives in one tool, logs in another, topology in a spreadsheet. GridNMS brings device monitoring, metrics, logs, and topology into one platform, agent-less, with ready-made vendor packs so it works on day one across Cisco, Juniper, FortiGate, MikroTik, UniFi, and more.
- Agent-less: nothing to install on the devices themselves.
- Downloadable vendor pack bundles for instant coverage.
- Cloud-hosted, or self-host the same platform with Docker.
See it on your own network.
From $49/month. Cloud-hosted, or self-hosted with Docker.