Alert with scope several nodes to be triggered when Application A is Up and Application B is down in the same server?

The question is similiar to this conversation:(+) Component Alerts - Forum - Server & Application Monitor (SAM) - THWACK

The point in this case is that, if I am right, complex alert configuration does not check if the applicatoin / component in the first condition belongs to the same node that in the second one. I would like to configure one alert for several nodes .

Find more posts tagged with

Accepted answers

All comments

Lofstrand

Have you tested to create an alert rule like this:

brscott

One alert for several nodes is thinking in the right direction.

What you are looking for is a SWQL query alert, and likely you want "Setup your SWQL connection:" , Dropdown -> "Node". Using node seems counter intuitive, and technically it could work either way, and both are complicated.

Alternative Setup:

With 2 apps there are 4 combinations of Up/Up, Up/Down, Down/Up, and Down/Down. If only one or two of those combinations are "bad" and the others are "good" then you have a situation where when you look at the summery page, you have to "know" which combo is good and bad. I operate on the theory that green is always good, and red is always bad (yeah, yeah there are exceptions, but rare). To accomplish this, create a SAM monitor with the powershell component (or linux script). In your script check both apps and return a status as the "statistic" variable and use a threashold, something like =1 is critical. Your script checks the apps and returns the value of 0 = good, 1 = bad in the statistic output. Now it is easy to look at and know if it's good or bad, and the alert is easy.

brscott

Here is the example SWQL I was talking about, if you wish to pursue that route, instead of taking my obviously superior advice. (just kidding there is no one size fits all monitoring and alerting).

Here is the Text of the SWQL: NOTE that first line above is provided for you (and cannot be modified), while below has more fields so I can see things better in SWQL studio.

SELECT top 10 Nodes.Uri, Nodes.DisplayName, aa.DisplayName, ab.DisplayName, aa.StatusDescription, ab.StatusDescription FROM Orion.Nodes AS Nodes
left join Orion.APM.Application aa on aa.NodeID = Nodes.nodeid
left join Orion.APM.Application ab on ab.NodeID = Nodes.nodeid
Where 
      aa.DisplayName = 'App1 Display Name'
  and ab.DisplayName = 'App2 Display Name'
  and aa.StatusDescription = 'Up'
  and ab.StatusDescription = 'Down'

NOTES: If you are going to use SWQL. YOU -NEED - SWQL studio.

https://github.com/solarwinds/OrionSDK/releases

Download the SDK MSI and install it, that will get you swql studio.