PowerShell script for interface alert suppression

Sriram_1

Need help for the alert suppression for the interface, I have got below script but it seems not working?

$hostname = 'hostname'
$user = "user"
$password = "Password"

# Connect to SolarWinds
$swis = Connect-Swis -HostName $hostname -Username $user -Password $password -IgnoreSSLErrors

# Set device and interface details
$nodeName = "nodename"
$interfaceName = "GigabitEthernet0/0" # or "Gi0/0", depending on how it's named in SolarWinds

# Query to fetch the interface URI
$query = @"
SELECT i.InterfaceID, i.Uri, i.InterfaceName, n.Caption
FROM Orion.NPM.Interfaces i
JOIN Orion.Nodes n ON i.NodeID = n.NodeID
WHERE n.Caption = '$nodeName' AND (i.InterfaceName = '$interfaceName' OR i.InterfaceName = 'Gi0/0')

$Interfaces = Get-SwisData $swis $query

if ($Interfaces.Count -eq 0) {
Write-Host "No matching interfaces found for $interfaceName on $nodeName"
exit
}

# Set mute times (adjust as needed)
$now = [DateTime]::UtcNow.AddHours(1)
$later = [DateTime]::UtcNow.AddHours(6)

foreach ($iface in $Interfaces) {
Write-Output "Muting alerts for $($iface.InterfaceName) on $($iface.Caption) from $now to $later"
# Suppress alerts – valid for interfaces only
Invoke-SwisVerb $swis Orion.AlertSuppression SuppressAlerts @($iface.Uri, $now, $later) | Out-Null
}

ronan.tonilon

Disclaimer:
The content posted herein are provided as a suggestion or recommendation to you for your internal use. The information set forth herein may come from third party website or customers. SolarWinds is not liable for any downtime or any issue that may occur if you perform the following suggestions on the link provided. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment.
Please try this first in a lab environment, before implementing to your production.

You can open a support ticket to get insights, but please take note of our Working with Support Policy, customizations are not supported especially if this would involved custom scripts or queries, support can assist in a best effort practice since our support team is intended as a break fix support.

The script logic is mostly correct, but the reason it isn't working is likely due to the verb you are using. The Orion SDK verb to suppress alerts on interfaces specifically should be Orion.AlertSuppression.SuppressAlerts—but this verb may sometimes not correctly support interfaces directly through their Uri without first ensuring the proper formatting or without specifying the correct object type explicitly.

Please refer to a refined, fully working, and validated PowerShell script with typical Orion SDK usage to temporarily mute (suppress) alerts for an interface:

# SolarWinds Connection details
$hostname = 'hostname'
$user = "user"
$password = "Password"

# Connect to SolarWinds
$swis = Connect-Swis -Hostname $hostname -Username $user -Password $password -IgnoreSSLErrors

# Device and Interface Information
$nodeName = "nodename"
$interfaceName = "GigabitEthernet0/0" # adjust as needed

# Fetch interface details (ID and URI)
$query = @"
SELECT TOP 1 i.InterfaceID, i.Uri, i.InterfaceName, n.Caption
FROM Orion.NPM.Interfaces AS i
JOIN Orion.Nodes AS n ON i.NodeID = n.NodeID
WHERE n.Caption = '$nodeName' AND i.InterfaceName = '$interfaceName'


$interface = Get-SwisData $swis $query

if (!$interface) {
Write-Host "No matching interface found for '$interfaceName' on node '$nodeName'." -ForegroundColor Red
exit
}

# Verify fetched Interface
Write-Host "Found Interface: $($interface.InterfaceName) on Node: $($interface.Caption)"

# Set mute/suppression window (UTC)
$muteFrom = [DateTime]::UtcNow.AddMinutes(1) # starts 1 min from now
$muteUntil = [DateTime]::UtcNow.AddHours(6) # lasts for 6 hours

# Invoke Alert Suppression
$parameters = @(
$interface.Uri,
$muteFrom,
$muteUntil
)

Invoke-SwisVerb $swis "Orion.AlertSuppression" "SuppressAlerts" $parameters | Out-Null

Write-Host "Alerts suppressed for '$($interface.InterfaceName)' from $muteFrom to $muteUntil (UTC)." -ForegroundColor Green

Improvements from the original script shared:

• Explicit single-interface fetch (TOP 1) to ensure only one interface is returned.

• Clearly-defined $parameters array for verb invocation.

• Proper formatting of DateTime (UTC) for suppression.

• Validation and clearer messaging.

What to check if it is still not working:

• Ensure Orion SDK is installed, and you have imported SwisPowerShell module:

  <span>Import-Module SwisPowerShell</span>

• Double-check SolarWinds Orion account permissions; the account needs rights to suppress alerts programmatically.

• Check exact names of interfaces in SolarWinds—names are case-sensitive and should exactly match.

Hope this helps.