How to create an alert for nodes down to only tirgger if parent is up.

Hi.

need you all solarwinds expert help to guide me to solve this issue.

currently now we are facing alot of alert flood in our mail. when i was checking the issue is the site is down and all nodes are detected down. we are looking for any ways to prevent alert to trigger for all the child devices which are connected to the main router/switch.

we able to supress if the child status is unknown/unreachable. But not for Down status.

please help me. we are really stress in this issue.

Find more posts tagged with

advanced_alerts

orion

network

npm

Alerts

Accepted answers

yer

Well in my scenario I create a dependency. First you need to create a Group and in that group add all the device that will act as child and then you need to exclude the device that will be or act as the Parent for that Group, then create a dependency and stipulate what device will be the Parent.

This way, when the Parent (for example, your WAN router) goes down, all the alerts for the Child devices (such as the ports, switches, or other downstream nodes) will be suppressed automatically

For example

router wan > parent
3 port of that router (or all devices connected to it) > child

if you will able to suppress for Unknown/Unreachable but not for Down, it’s usually because the dependency relationship hasn’t been set properly — with the right parent/child config, the system will suppress alerts for “Down” children as well.

And if the parent is Up and a node within the child group is down, when I set up an alert specifically for that node or use the out-of-the-box (alert me when a nodes is down) for down nodes, it notifies me. Hopes this help!

All comments

jeff.stewart

Have you enabled the dependencies feature for the network devies yet?

https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-automatic-dependencies-sw1154.htm

Jeff

naveensingh43

"Unreachable" status is suppressible via dependencies. This status means the node can't be reached, but the root cause might be a parent node being down.
"Unknown" status can also be suppressed, typically when polling fails.
"Down" status, however, is not suppressed by dependencies. This is by design.

SolarWinds polls nodes independently and asynchronously, so if:

The child node is polled first and fails (e.g., ICMP timeout), it gets marked as Down.
Then the parent node is polled and is found to be Down, SolarWinds does not retroactively change the child’s status to "Unreachable".
Result: You get alerts for the child node being Down—even though it’s actually unreachable due to the parent being down.

Alert Hold Time (also called alert suppression delay or trigger condition delay) is a feature in SolarWinds that allows you to:

Wait for a specified duration before triggering an alert.
This gives SolarWinds time to poll both parent and child nodes, helping ensure the correct status is set before alerts are fired.

yer

mistik84

yes. just need confirm should i disable auto dependency calculate from Solarwinds?