Not coming from Solarwinds, this may be trivial in other places, but here the solution seems to escape me.
I have created an alert that springs up when the value of my OID is 1, instead of 0. It is just some ICMP probe at this moment, but ideally I want to explore other SDwan thresholds.
My Orchestrator, yes... it probes, and reacts to different probes, but my alerts are not nicely coming from Solarwinds, which should be our standard for our monitoring team.
This is coming from a OID table:
like 1.2.3.4.5.6.7.8.999 is the table (this is obviously an example)
1.2.3.4.5.6.7.8.999.10 is element 10 ....8.999.11 is element 11 etc.
AND
1.2.3.4.5.6.7.8.777.10 is the internal name of that interface I am probing from.
...
Note in some of my appliances this can change to 999.7 and 999.8 for example. That is why this is not always exactly 10 and 11. I may not be interested in elements 1 to 9 yet.
What I can control is the name of the probe...
1.2.3.4.5.6.7.8.999.10 = MONITOR1
1.2.3.4.5.6.7.8.999.11 = MONITOR2
So if Node is UP, but MONITOR1 is 1 (down) or MONITOR2 is 1 (down) [or both] then I can create the trigger and the alert.
I can display the node and the Object in the email alert with:
${N=SwisEntity;M=CustomPollerAssignment.Node.DisplayName
I am actually pulling only the change of status 1.2.3.4.5.6.7.8.777, ... and Universal Device Poller, nicely matches that with the table 999 for me, which is great. So I created one single poller for 999
${N=SwisEntity;M=DisplayName} OR ${N=SwisEntity;M=RowLabel}
>>>But what I cannot be able to display in the alert is something like<<<
"your Node XXX is up
But probe Y is broken (from table 777 and 999) << 0 changed to 1
which is Interface Z (from table 888)"
The last line comes from a slightly different OID end, just a different table.
Before someone stumble on a "simpler" solution, No: the physical interface may be perfectly UP! even passing some traffic... I need end to end metrics. Happy to starts with a icmp probe.
----> sample (heavily edited because of security)
$ snmpwalk ... 1.2.3.4.5.6.7.8.999
...
SNMPv2-SMI::1.2.3.4.5.6.7.8.999.10 = STRING: "MONITOR1"
SNMPv2-SMI::1.2.3.4.5.6.7.8.999.11 = STRING: "MONITOR2"
$ snmpwalk ... 1.2.3.4.5.6.7.8.777
...
SNMPv2-SMI::1.2.3.4.5.6.7.8.999.10 = INTEGER: 1 <<< means down!
SNMPv2-SMI::1.2.3.4.5.6.7.8.999.11 = INTEGER: 0
$ snmpwalk ... 1.2.3.4.5.6.7.8.888
...
SNMPv2-SMI::1.2.3.4.5.6.7.8.999.10 = STRING: "intf1"
SNMPv2-SMI::1.2.3.4.5.6.7.8.999.11 = STRING: "intf2"
I have tried some "variables" in the Alert, but all of them don't work here. Also some double conditions. One for Node, one for Custom SNMP poller... no idea where to go from here.
Any ideas? I don't talk Solarwind's lingo... but if given proper guidance, maybe you can help.
