VM Reboot alert issue

Otaibi0b

we are receiving this alert from time to time but no actual reboot happens how can we reduce this false-positive alert

every time we get this we check the VM and it's run time more than months & no Event ID for that

Alert Message

The Virtual Machine has Rebooted
The Host was Down for 0 Minutes
Run Time: 0 Minutes

Find more posts tagged with

sam

vman

solarwinds

application_monitor

vcenter

Alerts

Accepted answers

All comments

Otaibi0b

this the alert settings

mapujece

You can reduce this false-positive alert by fine-tuning the monitoring thresholds so that alerts are only triggered when a reboot lasts more than a specific duration, like over a minute. Also, ensure that alerts correlate with actual system events, such as an Event ID in the logs or a confirmed uptime reset. Often, these alerts are caused by momentary communication drops between the VM and the monitoring system rather than actual reboots. Exclaimer can be part of your broader IT management ecosystem, helping streamline alerts and notifications. Keeping VM tools or integration services updated can help avoid misreporting. You may also want to configure your monitoring system to suppress or deduplicate alerts when no real change is detected.

Seashore

Hi, so you are alerting when [Run Time]<30. And you are sending the variable for run time in the alert and that says that "Run Time=0", right?

I can't find that value, run time, in perfstack, so it's probably a single value (don't have a lab at the moment).

If you look at that value say 15 min after the alert, is it still under 30 or high again? Thinking if it can be a glitch in getting that value if it's always alerting on being zero. If so, can you add a line in the trigger condition saying that "[Run time]<>0"?

naveensingh43

did you try use

Condition must exist for more than
Trigger the alert only if