Cacti – RRDTool Specific Features

# RRDTool Specific Features

## GPRINT Presets

A GPRINT is a graph item type that enables you to print the values of data sources on a graph. They are typically used to represent legend values on the graph. The output format of these numbers are controlled by a printf-like format string. Cacti enables you to keep a global list of these strings that can be applied to any graph item throughout Cacti.

### Creating a GPRINT Preset

To create a new GPRINT preset, select the Graph Management menu item under the Management heading, and select GPRINT Presets. Click Add to the right and you will be presented with an edit page containing two fields. Enter a name for your GPRINT preset, and the actual printf-like string in the GPRINT Text field. When you are finished, click the Create button to create your new GPRINT preset.

## CDEFs

CDEFs allow you to apply mathematical functions to graph data to alter output. The concept of a CDEF comes straight from RRDTool, and are written in reverse polish notation (RPN). For more information regarding the syntax of CDEFs, check out the CDEF tutorial.

### Creating a CDEF

To create a new CDEF in Cacti, select the Graph Management option under the Management heading, and select CDEFs. Once at this screen, click Add to the right. You will be prompted for a CDEF name, for which you can type anything used to describe your CDEF. Click the Create button so you are redirected back to the edit page, now with an empty CDEF Items box. Construct your CDEF by adding an item for each element in the CDEF string, common types such as operators and functions are enumerated for your convenience. Below is a basic description of each CDEF item type.

###### Table 19-1. CDEF Item Types

Type | Description
--- | ---
Function | You can choose a CDEF function to use as the item. The RRDTool's graph manual describes the purpose of each CDEF function.
Operator | Just your standard math operators, including modulo (%).
Special Data Source | A special data source is basically a flag to tell Cacti to do some special processing when it encounters this CDEF item. The "Current Graph Item Data Source" type basically inserts the name of the data source that is referenced by the graph item that references to this CDEF. Both of the "All Data Sources" types insert a summation of all data sources used on a graph.
Another CDEF | You can recursively use another CDEF within this CDEF.
Custom String | Sometimes it's just easier to type out the literal CDEF string manually. When referencing to data sources on the graph, remember that Cacti names them 'a', 'b', 'c', '...', starting with the first data source on the graph.

### Special Data Source

The Special Data Source selection introduces some variables not known to plain vanilla RRDTool. Let's spend some few words of them to unleash their power.

###### Table 19-2. CDEF Special Data Source

Special Data Source | Description
--- | ---
Current Graph Item Data Source | Will be replaced by the DEF name of the RRDTool data source referred by the graph item this CDEF is associated to.
All Data Sources (Don't Include Duplicates) | Will add up all data sources of the whole graph to form a total. A data source that appears more than once will be counted only once. Data sources that differ by consolidation functions only are NOT counted as different data sources (e.g. traffic_in:AVERAGE and traffic_in:MAX are counted only once). It is NOT required to associate the graph item to any data source!
All Data Sources (Include Duplicates) | Will add up all data sources of the whole graph to form a total. A data source that appears more than once will be counted for each time of it's appearance. Data sources that differ by consolidation functions only are NOT counted as different data sources (e.g. traffic_in:AVERAGE and traffic_in:MAX are counted only once). It is NOT required to associate the graph item to any data source!
Similar Data Sources (Don't Include Duplicates) | It is REQUIRED to associate the graph item to the data source that shall be totaled! Let's assume the data source is named "traffic_in". Then, cacti will add up all data sources "traffic_in" of the whole graph to form a data source specific total (e.g. Total traffic In). Data sources with different consolidation functions are counted as same data sources (e.g. traffic_in:AVERAGE and traffic_in:MAX are counted once)
Similar Data Sources (Include Duplicates) | It is REQUIRED to associate the graph item to the data source that shall be totaled! If a data source appears multiple times, it will be added this many times.
Current Data Source Item: Minimum Value | Taken from the Data Template - Data Source Item related to this graph item: fetches the minimum value defined for the given data template. Caution: This is NOT the smallest entry of the given data source!
Current Data Source Item: Maximum Value | Taken from the Data Template - Data Source Item related to this graph item: fetches the maximum value defined for the given data template. Caution: This is NOT the highest entry of the given data source!
Graph: Lower Limit | Taken from the Graph Template: fetches the Lower Limit defined to the Graph Template. This is independent of all --alt-autoscaling options. It is NOT the dynamically determined lower boundary of the graph!
Graph: Upper Limit | Taken from the Graph Template: fetches the Upper Limit defined to the Graph Template. This is independent of all --alt-autoscaling options. It is NOT the dynamically determined upper boundary of the graph!
Count of All Data Sources (Don't Include Duplicates) | Will count the number of all data sources of the whole graph. A data source that appears more than once will be counted only once. Data sources that differ by consolidation functions only are NOT counted as different data sources (e.g. traffic_in:AVERAGE and traffic_in:MAX are counted only once). It is NOT required to associate the graph item to any data source!
Count of All Data Sources (Include Duplicates) | Will count the number of all data sources of the whole graph. A data source that appears more than once will be counted for each time of it's appearance. Data sources that differ by consolidation functions only are NOT counted as different data sources (e.g. traffic_in:AVERAGE and traffic_in:MAX are counted only once). It is NOT required to associate the graph item to any data source!
Count of Similar Data Sources (Don't Include Duplicates) | It is REQUIRED to associate the graph item to the data source that shall be counted! Let's assume the data source is named "traffic_in". Then, cacti will count all data sources "traffic_in" of the whole graph. Data sources with different consolidation functions are counted as same data sources (e.g. traffic_in:AVERAGE and traffic_in:MAX are counted once)
Count of Similar Data Sources (Include Duplicates) | It is REQUIRED to associate the graph item to the data source that shall be counted! If a data source appears multiple times, it will be counted this many times.

While the `All Data Sources/Similar Data Sources` pseudo CDEF variables perform totaling, the `Count All Data Sources/Count Similar Data Sources` pseudo CDEF Variables simply count the occurrences of the related data sources. Thus, it is easy to compute e.g. an average of all similar data sources by creating the CDEF:

`CDEF=SIMILAR_DATA_SOURCES_NODUPS,COUNT_SIMILAR_DS_NODUPS,/`

### Using Special Data Source

Let's have some examples:

This is the list of graph items defined. Please note, that Item numbers 17-20 are duplicates of Item numbers 1-4. Even if it usually does not make sense, for this discussion it is very valuable. Item numbers 21-24 are related to a `cdef=ALL_DATA_SOURCES_NODUPS`.

Graph Item | Data Source | Graph Item Type | CF Type
--- | --- | --- | ---
Item # 1 | (traffic_in): 1. Target Traffic In | LINE1 | AVERAGE
Item # 2 | (traffic_in): Current: | GPRINT | LAST
Item # 3 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 4 | (traffic_in): Maximum:[HR] | GPRINT | MAX
Item # 5 | (traffic_in): 2. Target Traffic In | LINE1 | AVERAGE
Item # 6 | (traffic_in): Current: | GPRINT | LAST
Item # 7 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 8 | (traffic_in): Maximum:[HR] | GPRINT | MAX
Item # 9 | (traffic_out): 1. Target Traffic Out | LINE1 | AVERAGE
Item # 10 | (traffic_out): Current: | GPRINT | LAST
Item # 11 | (traffic_out): Average: | GPRINT | AVERAGE
Item # 12 | (traffic_out): Maximum:[HR] | GPRINT | MAX
Item # 13 | (traffic_out): 2. Target Traffic Out | LINE1 | AVERAGE
Item # 14 | (traffic_out): Current: | GPRINT | LAST
Item # 15 | (traffic_out): Average: | GPRINT | AVERAGE
Item # 16 | (traffic_out): Maximum:[HR] | GPRINT | MAX
Item # 17 | (traffic_in): 1. Target Again Traffic In | LINE1 | AVERAGE
Item # 18 | (traffic_in): Current: | GPRINT | LAST
Item # 19 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 20 | (traffic_in): Maximum:[HR] | GPRINT | MAX
Item # 21 | (No Task): AllDsNoDups | LINE1 | AVERAGE
Item # 22 | (No Task): Current: | GPRINT | LAST
Item # 23 | (No Task): Average: | GPRINT | AVERAGE
Item # 24 | (No Task): Maximum:[HR] | GPRINT | MAX

And this is the rrd graph statement:

    /usr/bin/rrdtool graph - \
    --imgformat=PNG \
    --start=-86400 \
    --end=-300 \
    --title="Traffic AllDsNoDups" \
    --base=1000 \
    --height=120 \
    --width=500 \
    --alt-autoscale-max \
    --lower-limit=0 \
    --vertical-label="" \
    --slope-mode \
    --font TITLE:12: \
    --font AXIS:8: \
    --font LEGEND:8: \
    --font UNIT:8: \
    DEF:a="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:AVERAGE \
    DEF:b="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:MAX \
    DEF:c="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:AVERAGE \
    DEF:d="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:MAX \
    DEF:e="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:AVERAGE \
    DEF:f="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:MAX \
    DEF:g="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:AVERAGE \
    DEF:h="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:MAX \
    CDEF:cdefca=TIME,1202925514,GT,a,a,UN,0,a,IF,IF,TIME,1202925514,GT,c,c,UN,0,c,IF,IF,TIME,1202925514,GT,e,e,UN,0,e,IF,IF,TIME,1202925514,GT,g,g,UN,0,g,IF,IF,+,+, \
    LINE1:a#FFFF00FF:"1. Target Traffic In" \
    GPRINT:a:LAST:"   Current:%8.2lf%s" \
    GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
    LINE1:c#FFD660FF:"2. Target Traffic In" \
    GPRINT:c:LAST:"     Current:%8.2lf%s" \
    GPRINT:c:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:d:MAX:"Maximum:%8.2lf%sn" \
    LINE1:e#CAF100FF:"1. Target Traffic Out" \
    GPRINT:e:LAST:"   Current:%8.2lf%s" \
    GPRINT:e:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:f:MAX:"Maximum:%8.2lf%sn" \
    LINE1:g#CCBB00FF:"2. Target Traffic Out" \
    GPRINT:g:LAST:"     Current:%8.2lf%s" \
    GPRINT:g:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:h:MAX:"Maximum:%8.2lf%sn" \
    LINE1:a#FF0000FF:"1. Target Again Traffic In" \
    GPRINT:a:LAST:"Current:%8.2lf%s" \
    GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
    LINE1:cdefca#000000FF:"AllDsNoDups" \
    GPRINT:cdefca:LAST:"        Current:%8.2lf%s" \
    GPRINT:cdefca:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:cdefca:MAX:"Maximum:%8.2lf%sn"

The data sources are denoted by the letters `a` to `h`. `cdefca` represents the important part. You surely notice, that all data sources using consolidation function `AVERAGE` are taken into account while `MAX` is skipped. Please pay attention to the data source denoted by `a`. Even though the data source appears twice, the cdef shows it only once. This is due to the duplicate suppression.

This is the list of graph items defined. Please note, that Item numbers 17-20 are duplicates of Item numbers 1-4. Even if it usually does not make sense, for this discussion it is very valuable. Item numbers 21-24 are related to a `cdef=ALL_DATA_SOURCES_DUPS`

Graph Item | Data Source | Graph Item Type | CF Type
--- | --- | --- | ---
Item # 1 | (traffic_in): 1. Target Traffic In | LINE1 | AVERAGE
Item # 2 | (traffic_in): Current: | GPRINT | LAST
Item # 3 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 4 | (traffic_in): Maximum:[HR] | GPRINT | MAX
Item # 5 | (traffic_in): 2. Target Traffic In | LINE1 | AVERAGE
Item # 6 | (traffic_in): Current: | GPRINT | LAST
Item # 7 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 8 | (traffic_in): Maximum:[HR] | GPRINT | MAX
Item # 9 | (traffic_out): 1. Target Traffic Out | LINE1 | AVERAGE
Item # 10 | (traffic_out): Current: | GPRINT | LAST
Item # 11 | (traffic_out): Average: | GPRINT | AVERAGE
Item # 12 | (traffic_out): Maximum:[HR] | GPRINT | MAX
Item # 13 | (traffic_out): 2. Target Traffic Out | LINE1 | AVERAGE
Item # 14 | (traffic_out): Current: | GPRINT | LAST
Item # 15 | (traffic_out): Average: | GPRINT | AVERAGE
Item # 16 | (traffic_out): Maximum:[HR] | GPRINT | MAX
Item # 17 | (traffic_in): 1. Target Again Traffic In | LINE1 | AVERAGE
Item # 18 | (traffic_in): Current: | GPRINT | LAST
Item # 19 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 20 | (traffic_in): Maximum:[HR] | GPRINT | MAX
Item # 21 | (No Task): AllDsDups | LINE1 | AVERAGE
Item # 22 | (No Task): Current: | GPRINT | LAST
Item # 23 | (No Task): Average: | GPRINT | AVERAGE
Item # 24 | (No Task): Maximum:[HR] | GPRINT | MAX

And this is the rrd graph statement:

    /usr/bin/rrdtool graph - \
    --imgformat=PNG \
    --start=-86400 \
    --end=-300 \
    --title="Traffic AllDsDups" \
    --base=1000 \
    --height=120 \
    --width=500 \
    --alt-autoscale-max \
    --lower-limit=0 \
    --vertical-label="" \
    --slope-mode \
    --font TITLE:12: \
    --font AXIS:8: \
    --font LEGEND:8: \
    --font UNIT:8: \
    DEF:a="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:AVERAGE \
    DEF:b="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:MAX \
    DEF:c="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:AVERAGE \
    DEF:d="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:MAX \
    DEF:e="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:AVERAGE \
    DEF:f="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:MAX \
    DEF:g="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:AVERAGE \
    DEF:h="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:MAX \
    CDEF:cdefca=TIME,1202925583,GT,a,a,UN,0,a,IF,IF,TIME,1202925583,GT,c,c,UN,0,c,IF,IF,TIME,1202925583,GT,e,e,UN,0,e,IF,IF,TIME,1202925583,GT,g,g,UN,0,g,IF,IF,TIME,1202925583,GT,a,a,UN,0,a,IF,IF,+,+,+,+ \
    LINE1:a#FFFF00FF:"1. Target Traffic In" \
    GPRINT:a:LAST:"      Current:%8.2lf%s" \
    GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
    LINE1:c#FFD660FF:"2. Target Traffic In" \
    GPRINT:c:LAST:"      Current:%8.2lf%s" \
    GPRINT:c:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:d:MAX:"Maximum:%8.2lf%sn" \
    LINE1:e#CAF100FF:"1. Target Traffic Out" \
    GPRINT:e:LAST:"     Current:%8.2lf%s" \
    GPRINT:e:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:f:MAX:"Maximum:%8.2lf%sn" \
    LINE1:g#CCBB00FF:"2. Target Traffic Out" \
    GPRINT:g:LAST:"     Current:%8.2lf%s" \
    GPRINT:g:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:h:MAX:"Maximum:%8.2lf%sn" \
    LINE1:a#FF0000FF:"1. Target Again Traffic In" \
    GPRINT:a:LAST:"Current:%8.2lf%s" \
    GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
    LINE1:cdefca#000000FF:"AllDsDups" \
    GPRINT:cdefca:LAST:"             Current:%8.2lf%s" \
    GPRINT:cdefca:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:cdefca:MAX:"Maximum:%8.2lf%sn"

Again, the data sources are denoted by the letters `a` to `h` and `cdefca` represents the important part. Please pay attention to the data source denoted by `a` appearing twice in this cdef. This is, because it appears twice (Item numbers 17-20) in the graph item list and duplicate suppression is not in effect.

Everything is very much like the above; again Item numbers 17-20 are duplicates of Item numbers 1-4. Item numbers 21-24 are related to a `cdef=SIMILAR_DATA_SOURCES_NODUPS` and are associated with the data source `traffic_in` of the `1`. target (it does not matter, which target is chosen, as long as you only choose a `traffic_in` data source)

Graph Item | Data Source | Graph Item Type | CF Type
--- | --- | --- | ---
Item # 1 | (traffic_in): 1. Target Traffic In | LINE1 | AVERAGE
Item # 2 | (traffic_in): Current: | GPRINT | LAST
Item # 3 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 4 | (traffic_in): Maximum:[HR] | GPRINT | MAX
Item # 5 | (traffic_in): 2. Target Traffic In | LINE1 | AVERAGE
Item # 6 | (traffic_in): Current: | GPRINT | LAST
Item # 7 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 8 | (traffic_in): Maximum:[HR] | GPRINT | MAX
Item # 9 | (traffic_out): 1. Target Traffic Out | LINE1 | AVERAGE
Item # 10 | (traffic_out): Current: | GPRINT | LAST
Item # 11 | (traffic_out): Average: | GPRINT | AVERAGE
Item # 12 | (traffic_out): Maximum:[HR] | GPRINT | MAX
Item # 13 | (traffic_out): 2. Target Traffic Out | LINE1 | AVERAGE
Item # 14 | (traffic_out): Current: | GPRINT | LAST
Item # 15 | (traffic_out): Average: | GPRINT | AVERAGE
Item # 16 | (traffic_out): Maximum:[HR] | GPRINT | MAX
Item # 17 | (traffic_in): 1. Target Again Traffic In | LINE1 | AVERAGE
Item # 18 | (traffic_in): Current: | GPRINT | LAST
Item # 19 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 20 | (traffic_in): Maximum:[HR] | GPRINT | MAX
Item # 21 | (traffic_in): SimilarDsNoDups | LINE1 | AVERAGE
Item # 22 | (traffic_in): Current: | GPRINT | LAST
Item # 23 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 24 | (traffic_in): Maximum:[HR] | GPRINT | MAX

And this is the rrd graph statement:

    /usr/bin/rrdtool graph - \
    --imgformat=PNG \
    --start=-86400 \
    --end=-300 \
    --title="Traffic SimilarDsNoDups" \
    --base=1000 \
    --height=120 \
    --width=500 \
    --alt-autoscale-max \
    --lower-limit=0 \
    --vertical-label="" \
    --slope-mode \
    --font TITLE:12: \
    --font AXIS:8: \
    --font LEGEND:8: \
    --font UNIT:8: \
    DEF:a="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:AVERAGE \
    DEF:b="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:MAX \
    DEF:c="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:AVERAGE \
    DEF:d="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:MAX \
    DEF:e="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:AVERAGE \
    DEF:f="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:MAX \
    DEF:g="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:AVERAGE \
    DEF:h="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:MAX \
    CDEF:cdefca=TIME,1202924474,GT,a,a,UN,0,a,IF,IF,TIME,1202924474,GT,c,c,UN,0,c,IF,IF,+ \
    CDEF:cdefcd=TIME,1202924474,GT,b,b,UN,0,b,IF,IF,TIME,1202924474,GT,d,d,UN,0,d,IF,IF,+ \
    LINE1:a#FFFF00FF:"1. Target Traffic In" \
    GPRINT:a:LAST:"    Current:%8.2lf%s" \
    GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
    LINE1:c#FFD660FF:"2. Target Traffic In" \
    GPRINT:c:LAST:"      Current:%8.2lf%s" \
    GPRINT:c:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:d:MAX:"Maximum:%8.2lf%sn" \
    LINE1:e#CAF100FF:"1. Target Traffic Out" \
    GPRINT:e:LAST:" \
    Current:%8.2lf%s" \
    GPRINT:e:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:f:MAX:"Maximum:%8.2lf%sn" \
    LINE1:g#CCBB00FF:"2. Target Traffic Out" \
    GPRINT:g:LAST:"     Current:%8.2lf%s" \
    GPRINT:g:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:h:MAX:"Maximum:%8.2lf%sn" \
    LINE1:a#FF0000FF:"1. Target Again Traffic In" \
    GPRINT:a:LAST:"Current:%8.2lf%s" \
    GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
    LINE1:cdefca#000000FF:"SimilarDsNoDups" \
    GPRINT:cdefca:LAST:"           Current:%8.2lf%s" \
    GPRINT:cdefca:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:cdefcd:MAX:"Maximum:%8.2lf%sn"

`cdefca` calculates the `SUM` of `all traffic_in` data sources, but pays attention only to consolidation function `AVERAGE`. Duplicate suppression makes sure, that the second occurrence of the `1`. target is not taken into account. So it's only summing data source `a` and `c`. `cdefca` is used the the `LINE1` graph item with exact match for consolidation function `AVERAGE` as well as for the best matched consolidation functions `LAST` and `MIN`.

`cdefcd` calculates the `SUM` of all `traffic_in` data sources, but pays attention only to consolidation function `MAX`. Again, duplicate suppression is in effect. So it's only summing data source `b` and `d`. `cdefcd` is used for the graph item with exact match for consolidation function `MAX` only. This is, because my rra settings only define `AVERAGE` and `MAX`, where `LAST` and `MIN` are omitted. This may differ for installations defining `LAST` and `MIN` as well.

Again, please note, that Item numbers 17-20 are duplicates of Item numbers 1-4. Item numbers 21-24 are related to a `cdef=SIMILAR_DATA_SOURCES_DUPS` and are associated with the data source `traffic_in` of the `1` target (it does not matter, which target is chosen, as long as you only choose a `traffic_in` data source)

Graph Item | Data Source | Graph Item Type | CF Type
--- | --- | --- | ---
Item # 1 | (traffic_in): 1. Target Traffic In | LINE1 | AVERAGE
Item # 2 | (traffic_in): Current: | GPRINT | LAST
Item # 3 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 4 | (traffic_in): Maximum:[HR] | GPRINT | MAX
Item # 5 | (traffic_in): 2. Target Traffic In | LINE1 | AVERAGE
Item # 6 | (traffic_in): Current: | GPRINT | LAST
Item # 7 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 8 | (traffic_in): Maximum:[HR] | GPRINT | MAX
Item # 9 | (traffic_out): 1. Target Traffic Out | LINE1 | AVERAGE
Item # 10 | (traffic_out): Current: | GPRINT | LAST
Item # 11 | (traffic_out): Average: | GPRINT | AVERAGE
Item # 12 | (traffic_out): Maximum:[HR] | GPRINT | MAX
Item # 13 | (traffic_out): 2. Target Traffic Out | LINE1 | AVERAGE
Item # 14 | (traffic_out): Current: | GPRINT | LAST
Item # 15 | (traffic_out): Average: | GPRINT | AVERAGE
Item # 16 | (traffic_out): Maximum:[HR] | GPRINT | MAX
Item # 17 | (traffic_in): 1. Target Again Traffic In | LINE1 | AVERAGE
Item # 18 | (traffic_in): Current: | GPRINT | LAST
Item # 19 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 20 | (traffic_in): Maximum:[HR] | GPRINT | MAX
Item # 21 | (traffic_in): SimilarDsDups | LINE1 | AVERAGE
Item # 22 | (traffic_in): Current: | GPRINT | LAST
Item # 23 | (traffic_in): Average: | GPRINT | AVERAGE
Item # 24 | (traffic_in): Maximum:[HR] | GPRINT | MAX

And this is the rrd graph statement:

    /usr/bin/rrdtool graph - \
    --imgformat=PNG \
    --start=-86400 \
    --end=-300 \
    --title="Traffic SimilarDsDups" \
    --base=1000 \
    --height=120 \
    --width=500 \
    --alt-autoscale-max \
    --lower-limit=0 \
    --vertical-label="" \
    --slope-mode \
    --font TITLE:12: \
    --font AXIS:8: \
    --font LEGEND:8: \
    --font UNIT:8: \
    DEF:a="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:AVERAGE \
    DEF:b="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_in:MAX \
    DEF:c="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:AVERAGE \
    DEF:d="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_in:MAX \
    DEF:e="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:AVERAGE \
    DEF:f="/var/www/html/cacti/rra/target1_traffic_in_235.rrd":traffic_out:MAX \
    DEF:g="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:AVERAGE \
    DEF:h="/var/www/html/cacti/rra/target2_traffic_in_8.rrd":traffic_out:MAX \
    CDEF:cdefca=TIME,1202925634,GT,a,a,UN,0,a,IF,IF,TIME,1202925634,GT,c,c,UN,0,c,IF,IF,TIME,1202925634,GT,a,a,UN,0,a,IF,IF,+,+ \
    CDEF:cdefcd=TIME,1202925634,GT,b,b,UN,0,b,IF,IF,TIME,1202925634,GT,d,d,UN,0,d,IF,IF,TIME,1202925634,GT,b,b,UN,0,b,IF,IF,+,+ \
    LINE1:a#FFFF00FF:"1. Target Traffic In" \
    GPRINT:a:LAST:"      Current:%8.2lf%s" \
    GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
    LINE1:c#FFD660FF:"2. Target Traffic In" \
    GPRINT:c:LAST:"    Current:%8.2lf%s" \
    GPRINT:c:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:d:MAX:"Maximum:%8.2lf%sn" \
    LINE1:e#CAF100FF:"1. Target Traffic Out" \
    GPRINT:e:LAST:"     Current:%8.2lf%s" \
    GPRINT:e:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:f:MAX:"Maximum:%8.2lf%sn" \
    LINE1:g#CCBB00FF:"2. Target Traffic Out" \
    GPRINT:g:LAST:"   Current:%8.2lf%s" \
    GPRINT:g:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:h:MAX:"Maximum:%8.2lf%sn" \
    LINE1:a#FF0000FF:"1. Target Again Traffic In" \
    GPRINT:a:LAST:"Current:%8.2lf%s" \
    GPRINT:a:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:b:MAX:"Maximum:%8.2lf%sn" \
    LINE1:cdefca#000000FF:"SimilarDsDups" \
    GPRINT:cdefca:LAST:Current:%8.2lf%s" \
    GPRINT:cdefca:AVERAGE:"Average:%8.2lf%s" \
    GPRINT:cdefcd:MAX:"Maximum:%8.2lf%sn"

`cdefca` and `cdefcd` represents the important part. You surely notice, that all data sources using consolidation function AVERAGE are taken into account for calculation `cdefca`, while `MAX` is calculated with `cdefcd`. Please pay attention to the data source denoted by `a` and `b`, respectively, appearing twice in those CDEFs as expected.

### More CDEF Examples

This example is based on the standard data template `ucd/net - Hard Drive Space`. Cacti ships an associated graph template named `ucd/net - Available Disk Space`. Often, users complain about the fact, that this template prints free and used space as absolute figures only. But instead of knowing, that your data partition has about 10GB used space, you may be interested in the percentage used. So let's create a simple example to show the power of the recently introduced special data sources.

To make it work, we need two new CDEFs. The first one may come in useful for a bunch of different graph templates. It's named `Make Current Data Source 0`. On a first glance, you may wonder why this CDEF is needed. It is used for those data sources, that will be used for calculations but shall not show up themselves. Here's the definition

`cdef=CURRENT_DATA_SOURCE,0,*`

Now, the other one, named `Current DS as Percentage of all DS`

`cdef=CURRENT_DATA_SOURCE,ALL_DATA_SOURCES_NODUPS,/,100,*`

Here's a short discussion. The first three elements read: Take the current data source and divide it by `Sum of All Data Sources (Don't include Duplicates)`. To form a percentage, you will have to multiply by 100. This is done by adding the elements four and five.

Now, let's build up the new graph

Graph Item | Data Source | Graph Item Type | CF Type | Item Color
--- | --- | --- | --- | ---
Item # 1 | (hdd_used): | LINE1 | AVERAGE |
Item # 2 | (hdd_free): | LINE1 | AVERAGE |
Item # 3 | (hdd_used): % Used | AREA | AVERAGE | FF0000

Item numbers 1 and 2 in most cases will exceed the maximum percentage of 100 by magnitudes. So they are associated with the CDEF named `Make Current Data Source 0` to make them zero. This adds the data sources to the graph but avoids them showing up. The pseudo-color of `None` is associated to both of them.

Item number 3 is associated to the data source `hdd_used` as we want to print the `% Used` of the partition. The CDEF is `Current DS as Percentage of all DS`, the color is set to `red (FF0000)`.

And this is the rrd graph statement:

    /usr/bin/rrdtool graph - \
    --imgformat=PNG \
    --start=-86400 \
    --end=-300 \
    --title="gandalf - Disk Space - / %used" \
    --rigid \
    --base=1024 \
    --height=120 \
    --width=500 \
    --alt-autoscale-max \
    --lower-limit=0 \
    --vertical-label="Percent" \
    --slope-mode \
    --font TITLE:12: \
    --font AXIS:8: \
    --font LEGEND:8: \
    --font UNIT:8: \
    DEF:a="/var/www/html/cacti/rra/target1_hdd_free_236.rrd":hdd_used:AVERAGE \
    DEF:b="/var/www/html/cacti/rra/target1_hdd_free_236.rrd":hdd_free:AVERAGE \
    CDEF:cdefa=a,0,* \
    CDEF:cdefb=b,0,* \
    CDEF:cdefc=a,TIME,1203272123,GT,a,a,UN,0,a,IF,IF,TIME,1203272123,GT,b,b,UN,0,b,IF,IF,+,/,100,* \
    LINE1:cdefa:"" \
    LINE1:cdefb:"" \
    AREA:cdefc#FF0000FF:"% Used"

`cdefa` and `cdefb` are used to make the according graph items zero. `cdefc` performs the percentage calculation.

You may of course add `GPRINT` legends as usual. If you do this for the "% Used" entry only, you will get surprising results, if your RRD file holds either `MAXIMUM`, `LAST` and/or `MINIMUM` consolidation function(s). This is left as an exercise to you :)

This set of CDEFs is used to colorize the background of a graph with different colors for day, night and weekends. The CDEFs are created as usual, we will show the CDEF definition only. Examples are taken from RRDTool-users mailing list courtesy Erik de Mare. Here are the definitions

#### Background for Daytime

`cdef=LTIME,86400,%,28800,GT,LTIME,86400,%,64800,LT,INF,UNKN,CURRENT_DATA_SOURCE,*,IF,UNKN,CURRENT_DATA_SOURCE,*,IF`

#### Background for Nighttime

cdef=LTIME,86400,%,28800,LT,INF,LTIME,86400,%,64800,GT,INF,UNKN,CURRENT_DATA_SOURCE,*,IF,IF`

#### Background for Weekend

`cdef=LTIME,604800,%,172800,GT,LTIME,604800,%,345600,LT,INF,UNKN,CURRENT_DATA_SOURCE,*,IF,UNKN,CURRENT_DATA_SOURCE,*,IF`

The value of `86400` represents the number of seconds of a day, whereas `28800` represents `8:00`, defined as the start of the day. End of the day, `64800` is assumed at `18:00`. Please replace those values if required. For weekends, same logic applies.

Now, let's apply those new CDEFs to a Graph Template. For this example, I've chosen the `Unix - Processes` that applies to `localhost` only. In turn, please create three new graph items, associate the processes data source, make them AREAs, select a color and opacity. Choose the `daytime`, `nighttime` and `weekend` CDEF in this sequence. As a last step, move those three new graph items to the top. I've chosen opacity of `20%` for Item numbers 1 to 3.

Graph Item | Data Source | Graph Item Type | CF Type | Item Color
--- | --- | --- | --- | ---
Item # 1 | (proc): | AREA | AVERAGE | FFFF00
Item # 2 | (proc): | AREA | AVERAGE | 0000FF
Item # 3 | (proc): | AREA | AVERAGE | 2E3127
Item # 4 | (proc): Running Processes | AREA | AVERAGE | F51D30
Item # 5 | (proc): Current: | GPRINT | LAST |
Item # 6 | (proc): Average: | GPRINT | AVERAGE |
Item # 7 | (proc): Maximum: | GPRINT | MAX |

Copyright (c) 2004-2020 The Cacti Group