I'm looking for a report that will allow me to see the time between the alert's trigger and reset so we can use this to evaluate the thresholds and delay timers on the alert.I found this thread: NPM 12 Report AlertHistory Downtime Minutes between Trigger and Reset - Alert Lab - The SolarWinds Platform - THWACK but haven't had much luck so far with getting it to work, and my search hasn't turned up any other threads related to this.Anyone out there that has written such a report? I'm mainly interested in just one alert, so something that allows for reporting on just a single alert would be awesome.
Rather than pulling it through custom SQL/SWQL you can use existing built in reports with some minor modifications to the conditions for your requirement.
Search for Report 'Triggered and Reset Alerts - Last 30 Days' copy it in your environment and make changes to the conditions that you are looking for - you can add additional conditions on Message (Alert message) - Event category to pull a report the way you want. Like the one that I have pasted.
Hope this helps.
Sorry I might have placed the AND condition in the wrong place, place that AND outside
I found this report while looking for solutions, but this report doesn't have the time of the reset, just the time of the event (trigger time)I'm looking for a report that will show the length of the event: Trigger/event time and reset time, so that we can review the length of the events to see if tweaking the dealy time on the alert might help clean up the noise alerts.We trying to clean up our Interface High Utilization alerts, and want to get a sense of how long the interface is above the high utilization threshold.