A YANG Data Model for Collection Measurement

1.1. PM Processing Pipeline in a Network Element

The PM processing pipeline considered in this document comprises the following three stages, as illustrated in Figure 1. Stage 2 (Collection) is the scope of this document.¶

  +------------------+    +====================+    +------------------+
  |     Stage 1      |    |      Stage 2        |    |     Stage 3      |
  |  Sampling        |--->|    Collection       |--->|   Reporting      |
  |                  |    |  (this document)    |    |                  |
  | - Physical layer |    |                     |    | - YANG-Push      |
  | - OWAMP/TWAMP/   |    | - Counts            |    |   RFC 8639/8640/ |
  |   STAMP/IOAM     |    | - Snapshot          |    |   8641           |
  | - Sensors        |    | - Tidemarks         |    | - OS/NDT/AI APP  |
  |                  |    | - Thresholding      |    |                  |
  +------------------+    +====================+    +------------------+

  raw samples              processed PM data           delivery

Stage 1 -- Sampling. This stage observes signals or protocol behaviours to produce raw samples. It encompasses direct observation of physical-layer signals as well as various OAM-based techniques. As examples of active measurement protocols that may be used in this stage, OWAMP [RFC4656], TWAMP [RFC5357], and STAMP [RFC8762] inject synthetic probe packets to measure one-way or round-trip delay, packet loss, and delay variation, while In-situ OAM (IOAM) [RFC9197] records performance data directly within user packets as they traverse the network.¶

Stage 2 -- Collection. This stage processes raw samples into summarised statistics over defined intervals and manages their retention. Historically, PM collection mechanisms based on SNMP MIBs used the performance-history textual conventions defined in [RFC3593], with the high-capacity variants in [RFC3705]. The Collection stage modelled in this document follows the common equipment management function requirements of ITU-T G.7710 and supports three collection types -- Counts, Snapshot, and Tidemarks -- together with threshold evaluation and the associated periodic and non-periodic events.¶

Stage 3 -- Reporting. This stage delivers Collection-stage data and notifications to external management systems or controllers. While traditional pull-based retrieval remains available, this document assumes the push-based subscription mechanisms introduced above ([RFC8639], [RFC8641], [RFC8640]). The role of the Collection-stage models defined here is to provide the data structures that those mechanisms carry. Typical clients of this Reporting stage include operations systems (OS), network digital twins (NDT), and AI-driven applications (AI APP), as illustrated in Figure 2.¶

   +------+  +-----+     +--------+
   |  OS  |  | NDT | ... | AI APP |
   +---+--+  +--+--+     +----+---+
       |        |             |
       |   PM data and notifications
       |   via YANG-Push (RFC 8639/8640/8641)
       |        |             |
   +---+--------+-------------+---+
   |            NE                |
   |  +-----------------------+   |
   |  |  EMF / Collection     |   |
   |  |  (this document)      |   |
   |  +-----------------------+   |
   +------------------------------+

   OS:  Operations System
   NDT: Network Digital Twins
   APP: Application

The YANG data model specified in this document is implemented within the Equipment Management Function (EMF) of an NE, as defined in ITU-T G.7710 Section 6.2. It is exposed at the NE's management interface and is consumed by remote clients such as operations systems (OS), Physical Network Controllers (PNCs), network digital twins (NDT), and AI-driven applications. Throughout this document the term "client" refers to any such consumer of the Collection Measurement interface, regardless of whether it acts as a controller, an analytics engine, or an operator-facing management system.¶

1.2. Relationship to the IETF Performance Metric Framework

The three-stage pipeline described above aligns with the framework for performance metric development given in [RFC6390]. The Collection stage modelled in this document corresponds to the Computed Performance Metrics described in Section 5.3 of [RFC6390]: the Counts and Tidemarks collection types are temporal aggregations (Section 5.3.1 of [RFC6390]) of base metrics over a collection interval, while the Snapshot collection type is a sampled value organised as a singleton in the sense of Section 5.6 of [RFC6390] and the IPPM framework [RFC2330].¶

Figure 3 summarises how the three collection types map onto the result organization of the IPPM framework.¶

+--------------------------------------------------------------------+
| Collection (G.7710):  counts | snapshot | tidemarks                |
|                                                                    |
|  +--------------+   +-------------------------------------------+  |
|  |  Snapshot    |   | Computed Performance Metrics              |  |
|  |              |   | (RFC 6390 Sec 5.3 / 5.3.1 aggregation)    |  |
|  | singleton    |   |                                           |  |
|  |              |   |   +---------------+    +----------------+ |  |
|  | (directly    |   |   |   Counts      |    |  Tidemarks     | |  |
|  |  sampled)    |   |   | statistic     |    |  statistic     | |  |
|  |              |   |   |    (sum)      |    | (min / max)    | |  |
|  |              |   |   |               |    |                | |  |
|  +--------------+   |   +---------------+    +----------------+ |  |
|                     +-------------------------------------------+  |
|                                                                    |
+--------------------------------------------------------------------+

RFC 2330 Sec 11 / RFC 6390 Sec 5.6 organize results as:
  singleton = elementary "atomic" value        -> Snapshot
  sample    = a set of singletons (one interval)
  statistic = value computed from a sample      -> Counts, Tidemarks

The base metrics aggregated by this model are produced in Stage 1 (Sampling) and are expected to be specified following the Performance Metric Specification of Section 5.4 of [RFC6390]. This document does not define or redefine those base metrics, nor does it introduce new performance metrics or parameters; following ITU-T G.7710, it identifies the operationally important subset (counts, snapshot, and tidemarks) and defines the YANG structures that compute, retain, and expose their aggregated values over the configured collection intervals. The acceptable ranges of sampling and collection intervals, and the required timing accuracy called for in Section 5.4.2 of [RFC6390], are determined by the referenced ITU-T G.7710 recommendation and by the parameter profiles defined in this document, rather than being fixed by the YANG model itself.¶

Except where [RFC6390] is explicitly referenced, this document uses the term "Sampling" for the Stage 1 activity described above and "Collection" for the Stage 2 activity. A collection interval (YANG node collection-interval) is the window over which sampled values are aggregated within the Collection stage; it is distinct from the sampling interval at which raw values are produced, and both retain the meaning derived from ITU-T G.7710.¶

1.3. Motivation and Scope

The legacy SNMP-based collection conventions [RFC3593] [RFC3705] and the associated pull-based polling architecture limit real-time visibility and flexible interval design at the scale of modern networks. The push-based subscription mechanisms [RFC8639] [RFC8640] [RFC8641] provide an efficient and scalable alternative for streaming management data, but those specifications define only the subscription and notification mechanisms themselves and do not prescribe the structure of the PM data being carried. A standardised YANG data model is therefore needed at the Collection stage to bridge low-level measurement data and high-level streaming subscriptions, since existing YANG models tend to focus on static configuration or simple state data and do not offer the structures required to express counts, snapshot, and tidemarks collection together with profile-based parameter grouping and threshold semantics aligned with ITU-T G.7710.¶

A further motivation concerns which performance information to collect and in what form. The IETF performance metric framework [RFC6390] provides methods for defining and computing metrics, but the space of possible computed metrics is effectively unbounded (for example, averages, variances, or percentiles could all be derived). ITU-T G.7710 instead reflects several decades of operational experience by fixing a deliberately small set of collection forms and parameters: per clause 10.1.6.2 of [G7710], gauge measurements are limited to snapshots (an instantaneous value) and tidemarks (the maximum and minimum), and counts to a simple accumulation, rather than general statistical aggregations; and per clause 10.1.6.4 of [G7710], the collected parameters are confined to an operational set such as ES, SES, BBE, BBC, and UAS for maintenance and quality-of-service purposes. The collection types are themselves defined as the form in which results are stored, independent of the collection interval. This document adopts that operationally-validated minimal set, rather than attempting to enumerate all statistically possible metrics, so that the resulting YANG model expresses what network operators actually need to retain and expose for fault management, maintenance, and SLA evaluation. This is also why the model is parameter-agnostic in structure: it standardises the collection forms (counts, snapshot, tidemarks) and leaves the specific parameters to be referenced from [G7710] and related Recommendations.¶

The scope of this document is therefore limited to the Collection stage. Within that scope, this document specifies YANG data models that enable: (a) flexible processing of performance metrics beyond simple counts, including Snapshot and Tidemarks, as defined in ITU-T G.7710; (b) configurable sampling and collection intervals that are not restricted to the legacy 15-minute or 24-hour windows; and (c) data and notification structure that supports flexible delivery of processed PM data to management systems, compatible with both pull-based retrieval and push-based subscription mechanisms.¶

The data model defined in this document realizes the Collection-stage functions described in [G7710], in particular performance-monitoring data, collection types, and threshold reporting.¶

The Collection-stage data and notifications defined here are compatible with the existing YANG-Push framework ([RFC8639], [RFC8640], [RFC8641]) for push-based delivery as well as with traditional pull-based retrieval via NETCONF or RESTCONF; this document does not define any new subscription or notification.¶

2.1. Types

Performance monitoring (PM) in networks encompasses a wide variety of parameters that reflect operational health, service quality, reliability, and environmental conditions. These parameters are used across many technologies, network layers, and functional domains to enable fault management, SLA compliance, trend analysis, predictive maintenance, and operational optimization.¶

PM parameter types include but are not limited to:¶

• Classical transport and packet layer metrics: such as errored seconds (ES), severely errored seconds (SES), unavailable seconds (UAS), background block errors (BBE), background block counts (BBC), delay, jitter, and packet loss, as defined in standards like ITU-T G.7710, and others.¶

• Layer-specific metrics:¶

  • Physical layer: optical power levels, laser bias current, loss of signal¶

  • Data link layer: Ethernet frame errors, FCS errors¶

  • Network layer: dropped packets, route flaps¶

  • Transport/Service layers: MPLS LSP statistics, OTN TCM/BIP counters¶

• Network environment parameters: including temperature, humidity, fan speed, voltage, and airflow. These are essential for equipment safety, energy management, and predictive failure analysis.¶

• Energy and sustainability metrics: such as power consumption, energy efficiency indicators, and cooling utilization, aligned with emerging sustainability standards and operational efficiency goals.¶

• Security and integrity parameters: such as pointer justification events (PJE), synchronization loss, or intrusion anomaly flags.¶

• Application-aware or SLA metrics: such as service availability, throughput consistency, and application-layer latency.¶

• Mobile network-specific metrics: including radio link failures, handover success/failure rates, RRC connection setup time, PDCP discard rate, and throughput per bearer. These metrics are critical for monitoring the performance of RAN, core, and edge network components in 4G/5G mobile environments.¶

These parameters may be grouped flexibly within the YANG model using parameter profiles that reflect shared characteristics, purpose, or applicable network domains. The architecture supports extension through identity-based typing to accommodate future parameter definitions introduced by standard bodies like ITU-T, IEEE, IETF, MEF, and TM Forum.¶

The data model defined in this document is parameter-agnostic: it specifies how performance parameters are collected, aggregated, and exposed, rather than defining the parameters themselves. The network and transport performance parameters listed above (for example, ES, SES, UAS, BBE, BBC) are the primary parameters in scope, and each is expected to be specified following the Performance Metric Specification template of Section 5.4.4 of [RFC6390] (metric name, description, method of measurement or calculation, units, measurement point, and measurement timing). The remaining categories (network environment, energy and sustainability, security, mobile network, and application-aware parameters) are listed as illustrative examples of the model's extensibility and are not themselves defined by this document; the specification of any such parameter is left to the relevant standards body.¶

2.2. Profiles

+--rw parameter-profile* [name]
   +--rw name              profile-names
   +--rw pm-parameter* [name]
      +--rw name           string

The YANG model defines the concept of a parameter profile to logically group performance parameters that are commonly measured together for a specific operational purpose. Each parameter profile is represented as a list entry keyed by a name of type profile-names (a string conforming to the format defined in the model). These profiles serve as named collections of performance parameters and are intended to facilitate streamlined configuration, management, and reporting of measurement data across network elements and management systems.¶

The use of parameter profiles improves operational efficiency by allowing operators, applications, and controllers to activate or reference a coherent set of parameters using a single profile identifier. For example, the itu-transport-maintenance-15min profile may include parameters such as errored seconds (ES), severely errored seconds (SES), and unavailable seconds (UAS), which are typically monitored together for network maintenance and fault detection purposes. Similarly, the example-ip-qos-24hr profile may include delay, jitter, and loss parameters used in service quality reporting. Parameter profiles support role-based access control, operational alignment, and measurement policy abstraction, enabling network operators and analytics systems to tailor data collection and reporting according to the needs of different users and services. The profile abstraction also aligns with ITU-T G.7710, which identifies multiple classes of performance monitoring (e.g., maintenance, service-level, and compliance monitoring), each requiring specific sets of performance parameters.¶

By modeling profiles as list entries keyed by a structured name (profile-names type), the YANG design ensures extensibility and vendor interoperability, allowing future profiles to be defined without changes to the core data structures. This approach promotes consistent configuration and integration across multi-vendor environments and supports dynamic service assurance use cases where parameter sets may vary by service type, SLA, or operational context.¶

<source>-<network>-<purpose>[-<characteristic>]

3.1. Interval Timing

+--rw sampling-interval* [id]
   +--rw id                  string
   +--rw interval-value?     uint32
   +--rw unit?               time-interval-unit
   +--rw collection-interval* [id]
      +--rw id                string
      +--rw interval-value?   uint32
      +--rw unit?             time-interval-unit

Interval timing parameters are key components of network performance management, offering standardized definitions for the time-related aspects of sampling, collection, and reporting performance data. These parameters apply to the three main collection types for network equipment: counts, snapshot, and tidemarks. They include the sampling interval, collection interval, and uniform time, all of which support consistent, accurate, and systematic performance monitoring and management.¶

Sampling interval defines the period at which network performance data is collected at consistent, predetermined time points. It ensures the continuous and timely capture of performance metrics, enabling accurate assessments of network conditions.¶

Collection interval specifies the duration over which sampled performance data is aggregated or statistically processed. It helps manage large volumes of data by summarizing it into meaningful indicators for analysis, anomaly detection, and resource management.¶

Uniform time is a fixed, predefined point within each collection interval at which a snapshot measurement is taken. It enables a consistent and instantaneous view of network performance across intervals, without requiring data aggregation. This approach facilitates quick diagnostics and synchronization across monitoring systems.¶

The acceptable ranges of sampling and collection intervals, and the timing accuracy required for a given parameter, are not fixed by this YANG model. As noted in Section 5.4.2 of [RFC6390], these constraints are part of the specification of each performance metric; in this document they are determined by ITU-T G.7710 and by the parameter profile in use, and a server advertises the intervals it supports as part of its capabilities.¶

3.2. Collection Types

+--rw collection-types
   +--rw counts
   |  +--rw transient-condition-config
   |  |  +--rw transient-threshold?   uint32
   |  +--rw standing-condition-config
   |  |  +--rw standing-threshold?    uint32
   |  |  +--rw reset-threshold?       uint32
   |  +--ro collection-value?        uint32
   +--rw snapshot
   |  +--rw uniform-time-config
   |  |  +--rw interval-value?        uint32
   |  |  +--rw unit?                  time-interval-unit
   |  +--rw threshold-config
   |  |  +--rw high-threshold?        uint32
   |  |  +--rw low-threshold?         uint32
   |  +--ro collection-value?        uint32
   +--rw tidemarks
      +--rw threshold-config
      |  +--rw high-threshold?        uint32
      |  +--rw low-threshold?         uint32
      +--ro high-collection-value?   uint32
      +--ro low-collection-value?    uint32

The collection types defined based on ITU-T G.7710 establish a focused and efficient framework for network performance monitoring by specifying three core collection types: counts, snapshot, and tidemarks.¶

This intentional limitation supports key objectives such as implementation simplicity, operational efficiency, and cross-vendor interoperability. It emphasizes real-time network monitoring, favoring instantaneous or interval-based metrics over complex statistical calculations. The counts and snapshot collection types provide immediate operational data without incurring the processing overhead associated with metrics like averages and variances. These statistical measures require significant aggregation logic, which can vary across implementations and devices. By keeping computation within network elements minimal, the approach reduces both processing and memory overhead, maintaining lightweight implementations. It establishes a clear separation between raw data collection (handled by network elements) and deeper analysis (delegated to external management systems). This separation not only simplifies device requirements but also enables more consistent and flexible analytics in centralized systems, which are better equipped to apply standardized analytical frameworks.¶

Limiting collection types also contributes to energy efficiency by reducing the operational burden on Network Elements (NEs), while offloading data analysis to external management applications. Despite the simplicity, the selected collection types offer sufficient expressiveness to support comprehensive performance monitoring without excessive resource use. They are specifically optimized for the NE-to-client interface -- referred to as the Southbound Interface (SBI) from a controller perspective (e.g., between a Physical Network Controller (PNC) and an NE), or equivalently as the northbound management interface from the NE's perspective -- to ensure as follows:¶

• Lightweight to implement¶

• Consistently supported across vendors¶

• Efficient for transport and storage in network management systems¶

The collection types are applicable to a wide range of monitored objects, including both network topology elements (e.g., links, tunnels) and physical equipment parameters (e.g., temperature, voltage).¶

In terms of the performance metric framework of [RFC6390], the three collection types correspond to the following operations, as summarised in Table 2.¶

The counts and tidemarks types are computed (aggregated) metrics in the sense of Section 5.3 of [RFC6390], whereas the snapshot type is a directly sampled value rather than an aggregation.¶

4.1. Periodic Thresholding

Periodic threshold events are triggered when the counts or gauge value reaches a pre-defined threshold during periodic measurements including counts, snapshot, and tidemarks for performance parameters.¶

The counts measurement has two types of threshold reporting methods: transient and standing condition methods. The transient condition method treats each measurement period separately. As soon as a threshold is reached or crossed in a collection interval for a given performance measurement, a threshold report (TR) is generated. The standing condition method is optional. The standing condition is raised, and a TR (Threshold Report) is generated, when the set threshold is reached or crossed. The standing condition is cleared, and a reset threshold report (RTR) is generated at the end of the period when the current value is below or equal to the reset threshold, provided that there was no unavailable time during that period.¶

For gauge measurements ("snapshot" and "tidemarks"), an overflow condition is determined and an out-of-range report is generated as soon as the gauge value reaches or crosses the high threshold. An underflow condition is determined and an out-of-range report is generated as soon as the gauge value is at or below the low threshold.¶

4.2. Non-Periodic Thresholding

Non-periodic threshold events are triggered regardless of the collection types (counts, snapshot, or tidemarks). The following parameters are used for non-periodic events.¶

• BUT (Begin Unavailable Time): The event marking the start of a period when a network element or connection is unavailable.¶

• EUT (End Unavailable Time): The event marking the end of a period when a network element or connection was unavailable.¶

• CSES (Consecutive Severely Errored Seconds): A sequence of severely errored seconds (SES) detected consecutively within a specified time interval. The reporting metrics include BUT, EUT, and the count of errors during that period.¶

5.1. Pull-Based Polling

The operational state data defined in this document can be retrieved by clients using standard NETCONF or RESTCONF operations, providing a pull-based access pattern analogous to traditional SNMP polling.¶

In traditional SNMP-based PM collection, a management system periodically issues GET or GET-BULK requests to retrieve counter values from the agent's MIB, such as the performance-history MIBs defined in [RFC3593] and [RFC3705]. The YANG data model defined here provides equivalent data structures accessible via NETCONF <get-data> operations against the operational datastore [RFC8342], or via RESTCONF HTTP GET requests, at any polling interval chosen by the client.¶

The collection-value leaf (config false) in the counts collection type, and the corresponding measurement leaves in snapshot and tidemarks, are read-only operational state nodes that reflect the current accumulated or instantaneous PM values within the active collection interval. These leaves are the YANG equivalents of SNMP counter and gauge objects in classical PM MIBs.¶

Figure 7 shows a NETCONF <get-data> request that retrieves the current errored-seconds (ES) count for the itu-transport-maintenance-15min profile, sampled every second over a 15-minute collection interval. A client may issue this request at any time to read the in-progress counter value, or at the end of each collection interval to collect the final result, replicating the behavior of a traditional SNMP polling cycle.¶

<rpc xmlns="urn:ietf:params:xml:ns:netconf:base:1.0"
     xmlns:pm-coll=
       "urn:ietf:params:xml:ns:yang:ietf-pm-collection"
     message-id="401">
  <get-data
      xmlns="urn:ietf:params:xml:ns:yang:ietf-netconf-nmda">
    <datastore
        xmlns:ds=
          "urn:ietf:params:xml:ns:yang:ietf-datastores">
      ds:operational
    </datastore>
    <subtree-filter>
      <pm-coll:pm-periodic-collection>
        <parameter-profile>
          <name>itu-transport-maintenance-15min</name>
          <pm-parameter>
            <name>es</name>
            <sampling-interval>
              <id>1s</id>
              <collection-interval>
                <id>15min</id>
                <collection-types>
                  <counts>
                    <collection-value/>
                  </counts>
                </collection-types>
              </collection-interval>
            </sampling-interval>
          </pm-parameter>
        </parameter-profile>
      </pm-coll:pm-periodic-collection>
    </subtree-filter>
  </get-data>
</rpc>

Figure 8 shows the corresponding reply, in which the server returns the current ES count of 7 accumulated during the collection interval in progress. This is equivalent to the value that a classical SNMP GET would retrieve from a performance-history MIB object.¶

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0"
           xmlns:pm-coll=
             "urn:ietf:params:xml:ns:yang:ietf-pm-collection"
           message-id="401">
  <data>
    <pm-coll:pm-periodic-collection>
      <parameter-profile>
        <name>itu-transport-maintenance-15min</name>
        <pm-parameter>
          <name>es</name>
          <sampling-interval>
            <id>1s</id>
            <collection-interval>
              <id>15min</id>
              <collection-types>
                <counts>
                  <collection-value>7</collection-value>
                </counts>
              </collection-types>
            </collection-interval>
          </sampling-interval>
        </pm-parameter>
      </parameter-profile>
    </pm-coll:pm-periodic-collection>
  </data>
</rpc-reply>

5.2. Periodic Events

The YANG-Push subscription model, as defined in [RFC8641], enables clients to subscribe to periodic performance measurement data from network elements. This model supports dynamic subscription establishment, modification, and termination for real-time streaming of PM data. Clients can specify subscription parameters including the target datastore (operational), encoding format (XML/JSON), and filtering criteria to receive only relevant performance metrics. The subscription mechanism allows for configurable update periods, enabling both high-frequency monitoring and long-term trend analysis (e.g., 24-hour intervals). Network elements generate periodic event notifications containing the requested PM data, which clients can process for real-time monitoring, historical analysis, or triggering automated responses based on performance thresholds.¶

Figure 9 shows a subscription request for the ES parameter in the itu-transport-maintenance-15min profile. It requests counts measurement data sampled every second and aggregated over a 15-minute interval. The reporting period is set to 900 seconds, so a notification is sent at the end of each collection interval.¶

<rpc xmlns="urn:ietf:params:xml:ns:netconf:base:1.0"
     xmlns:sn=
       "urn:ietf:params:xml:ns:yang:ietf-subscribed-notifications"
     xmlns:pm-coll=
       "urn:ietf:params:xml:ns:yang:ietf-pm-collection"
     message-id="101">
  <sn:establish-subscription>
    <sn:stream>YANG-PUSH</sn:stream>
    <sn:encoding>encode-xml</sn:encoding>
    <sn:filter>
      <sn:datastore>operational</sn:datastore>
      <sn:xpath-filter>
        /pm-coll:pm-periodic-collection/
          parameter-profile[name='itu-transport-maintenance-15min']/
          pm-parameter[name='es']/
          sampling-interval[id='1s']/
          collection-interval[id='15min']/
          collection-types/counts/collection-value
      </sn:xpath-filter>
    </sn:filter>
    <sn:period>900</sn:period>
    <sn:anchor-time>2024-07-01T00:00:00Z</sn:anchor-time>
  </sn:establish-subscription>
</rpc>

Figure 10 shows a notification for the ES parameter in the itu-transport-maintenance-15min profile. It reports the counts measurement value sampled every second and aggregated over a 15-minute interval. The measured value (10) represents the total errored seconds in that period.¶

<notification
    xmlns="urn:ietf:params:xml:ns:netconf:notification:1.0"
    xmlns:pm-coll=
      "urn:ietf:params:xml:ns:yang:ietf-pm-collection">
  <eventTime>2024-07-01T00:15:00Z</eventTime>
  <pm-coll:pm-periodic-collection>
    <parameter-profile>
      <name>itu-transport-maintenance-15min</name>
      <pm-parameter>
        <name>es</name>
        <sampling-interval>
          <id>1s</id>
          <interval-value>1</interval-value>
          <unit>second</unit>
          <collection-interval>
            <id>15min</id>
            <interval-value>15</interval-value>
            <unit>minute</unit>
            <collection-types>
              <counts>
                <collection-value>10</collection-value>
              </counts>
            </collection-types>
          </collection-interval>
        </sampling-interval>
      </pm-parameter>
    </parameter-profile>
  </pm-coll:pm-periodic-collection>
</notification>

5.3. Threshold Events

Threshold event subscriptions enable clients to receive immediate notifications when performance metrics cross predefined thresholds, providing proactive monitoring capabilities. This subscription type uses standard YANG-Push [RFC8639] [RFC8641] datastore change notifications to deliver the threshold events defined in this document.¶

+--ro counts-transient
|  +--ro event-type?       enumeration
|  +--ro event-occurred?   boolean
|  +--ro event-time?       yang:date-and-time
+--ro counts-standing
|  +--ro event-type?       enumeration
|  +--ro event-occurred?   boolean
|  +--ro event-time?       yang:date-and-time
+--ro snapshot
|  +--ro event-type?       enumeration
|  +--ro event-occurred?   boolean
|  +--ro event-time?       yang:date-and-time
+--ro tidemarks
   +--ro event-type?       enumeration
   +--ro event-occurred?   boolean
   +--ro event-time?       yang:date-and-time

<rpc xmlns="urn:ietf:params:xml:ns:netconf:base:1.0"
     xmlns:sn=
       "urn:ietf:params:xml:ns:yang:ietf-subscribed-notifications"
     xmlns:pm-coll=
       "urn:ietf:params:xml:ns:yang:ietf-pm-collection"
     message-id="202">
  <sn:establish-subscription>
    <sn:stream>YANG-PUSH</sn:stream>
    <sn:encoding>encode-xml</sn:encoding>
    <sn:filter>
      <sn:datastore>operational</sn:datastore>
      <sn:xpath-filter>
        /pm-coll:pm-threshold-events
      </sn:xpath-filter>
    </sn:filter>
    <sn:period>1</sn:period>
    <sn:anchor-time>2024-07-01T00:00:00Z</sn:anchor-time>
  </sn:establish-subscription>
</rpc>

<notification
    xmlns="urn:ietf:params:xml:ns:netconf:notification:1.0"
    xmlns:pm-coll=
      "urn:ietf:params:xml:ns:yang:ietf-pm-collection">
  <eventTime>2024-07-01T00:05:23Z</eventTime>
  <pm-coll:pm-threshold-events>
    <periodic-events>
      <parameter-profile>
        <name>itu-transport-maintenance-15min</name>
        <pm-parameter>
          <name>es</name>
          <sampling-interval>
            <id>1s</id>
            <interval-value>1</interval-value>
            <unit>second</unit>
            <collection-interval>
              <id>15min</id>
              <interval-value>15</interval-value>
              <unit>minute</unit>
              <event-types>
                <snapshot>
                  <event-type>High-OOR-event</event-type>
                  <event-occurred>true</event-occurred>
                  <event-time>2024-07-01T00:05:23Z</event-time>
                </snapshot>
              </event-types>
            </collection-interval>
          </sampling-interval>
        </pm-parameter>
      </parameter-profile>
    </periodic-events>
  </pm-coll:pm-threshold-events>
</notification>

+--ro non-periodic-events
   +--ro BUT-event
   |  +--ro event-occurred?   boolean
   |  +--ro event-time?       yang:date-and-time
   +--ro EUT-event
   |  +--ro event-occurred?   boolean
   |  +--ro event-time?       yang:date-and-time
   |  +--ro duration?         uint32
   +--ro CSES-event
      +--ro event-occurred?   boolean
      +--ro start?            yang:date-and-time
      +--ro end?              yang:date-and-time
      +--ro duration?         uint32
      +--ro error-count?      uint32

11.1. Normative References

[G7710]

ITU-T, "Common Equipment Management Function Requirements", ITU-T Recommendation G.7710, November 2025, <https://www.itu.int/rec/T-REC-G.7710>.

[RFC6020]

Bjorklund, M., Ed., "YANG - A Data Modeling Language for the Network Configuration Protocol (NETCONF)", RFC 6020, DOI 10.17487/RFC6020, October 2010, <https://www.rfc-editor.org/rfc/rfc6020>.

[RFC6241]

Enns, R., Ed., Bjorklund, M., Ed., Schoenwaelder, J., Ed., and A. Bierman, Ed., "Network Configuration Protocol (NETCONF)", RFC 6241, DOI 10.17487/RFC6241, June 2011, <https://www.rfc-editor.org/rfc/rfc6241>.

[RFC8342]

Bjorklund, M., Schoenwaelder, J., Shafer, P., Watsen, K., and R. Wilton, "Network Management Datastore Architecture (NMDA)", RFC 8342, DOI 10.17487/RFC8342, March 2018, <https://www.rfc-editor.org/rfc/rfc8342>.

[RFC8639]

Voit, E., Clemm, A., Gonzalez Prieto, A., Nilsen-Nygaard, E., and A. Tripathy, "Subscription to YANG Notifications", RFC 8639, DOI 10.17487/RFC8639, September 2019, <https://www.rfc-editor.org/rfc/rfc8639>.

[RFC8640]

Voit, E., Clemm, A., Gonzalez Prieto, A., Nilsen-Nygaard, E., and A. Tripathy, "Dynamic Subscription to YANG Events and Datastores over NETCONF", RFC 8640, DOI 10.17487/RFC8640, September 2019, <https://www.rfc-editor.org/rfc/rfc8640>.

[RFC8641]

Clemm, A. and E. Voit, "Subscription to YANG Notifications for Datastore Updates", RFC 8641, DOI 10.17487/RFC8641, September 2019, <https://www.rfc-editor.org/rfc/rfc8641>.

11.2. Informative References

[RFC2330]

Paxson, V., Almes, G., Mahdavi, J., and M. Mathis, "Framework for IP Performance Metrics", RFC 2330, DOI 10.17487/RFC2330, May 1998, <https://www.rfc-editor.org/rfc/rfc2330>.

[RFC3593]

Tesink, K., Ed., "Textual Conventions for MIB Modules Using Performance History Based on 15 Minute Intervals", RFC 3593, DOI 10.17487/RFC3593, September 2003, <https://www.rfc-editor.org/rfc/rfc3593>.

[RFC3688]

Mealling, M., "The IETF XML Registry", BCP 81, RFC 3688, DOI 10.17487/RFC3688, January 2004, <https://www.rfc-editor.org/rfc/rfc3688>.

[RFC3705]

Ray, B. and R. Abbi, "High Capacity Textual Conventions for MIB Modules Using Performance History Based on 15 Minute Intervals", RFC 3705, DOI 10.17487/RFC3705, February 2004, <https://www.rfc-editor.org/rfc/rfc3705>.

[RFC4656]

Shalunov, S., Teitelbaum, B., Karp, A., Boote, J., and M. Zekauskas, "A One-way Active Measurement Protocol (OWAMP)", RFC 4656, DOI 10.17487/RFC4656, September 2006, <https://www.rfc-editor.org/rfc/rfc4656>.

[RFC5357]

Hedayat, K., Krzanowski, R., Morton, A., Yum, K., and J. Babiarz, "A Two-Way Active Measurement Protocol (TWAMP)", RFC 5357, DOI 10.17487/RFC5357, October 2008, <https://www.rfc-editor.org/rfc/rfc5357>.

[RFC6390]

Clark, A. and B. Claise, "Guidelines for Considering New Performance Metric Development", BCP 170, RFC 6390, DOI 10.17487/RFC6390, October 2011, <https://www.rfc-editor.org/rfc/rfc6390>.

[RFC8341]

Bierman, A. and M. Bjorklund, "Network Configuration Access Control Model", STD 91, RFC 8341, DOI 10.17487/RFC8341, March 2018, <https://www.rfc-editor.org/rfc/rfc8341>.

[RFC8762]

Mirsky, G., Jun, G., Nydell, H., and R. Foote, "Simple Two-Way Active Measurement Protocol", RFC 8762, DOI 10.17487/RFC8762, March 2020, <https://www.rfc-editor.org/rfc/rfc8762>.

[RFC9197]

Brockners, F., Ed., Bhandari, S., Ed., and T. Mizrahi, Ed., "Data Fields for In Situ Operations, Administration, and Maintenance (IOAM)", RFC 9197, DOI 10.17487/RFC9197, May 2022, <https://www.rfc-editor.org/rfc/rfc9197>.