Time of Day Alerting & Alert Actions

Reposted to allow voting.

Currently there is a time of day alerting already in place but to alert for a weekend it takes 3 different alerts (Friday 18.00-00.00, Saturday & Sunday and Monday 00.00-08.00). Can I request something where you can select all of these options (in NPM, Syslog and SNMP-Traps), following on from that can the Syslog/SNMP-Trap alert actions match the Advanced Alert Actions (eg add "Log the Alert to the NetPerfMon Event Log", "Dial Paging or SMS service") - this will allow alerts to be configured from 1 central place (even though the forwarding of said alerts will be configured in the Syslog/SNMP-Trap Rules). Having the ability to set this at the top level alert or within each action would be good (along with being able to disable an action rather than the whole alert)

Thanks,

Peter

Find more posts tagged with

prodfr

npm

schedule

Alerts

Status: None

Comments

cmgurley

Any chance we could expand this idea to relative windows? In other words, time periods that would allow for monthly schedules (i.e. 3rd Sunday) and then have a duration extending from the start time? This sorta overlaps with the Unmanage Utility, but it also fits with the other idea about Silencing Alerts while still monitoring. The reason for all this would be to avoid losing alerting on the other weekly windows, since this is either every week or not at all.

PeterLyttle

Personally I think the way Symantec have done it allow most of the different options to be selected. The above screenshot could be for when an alert / action is active.

As for unschedule/silencing alerts I would have thought something like this -

marunderwood

To add on to this request, the reset and alert actions need to be more closely coupled plus aware of the schedule. For instance,

Suppose you don't want to see an alert after normal work hours (because you know the night processes will trigger it), and an alert was triggerred. Once the work day begins & the alert is still active (which you're not expecting), the trigger action should occur. (Of course you'll want to include the original triggered date/time in the message.) Or, even better it should be a flag as to whether it occurs or not on each message. And to complicate it even further, you'll have to consider if it originally triggered on a prior day & the settings on the alert escalation tab.
And suppose the alert triggered during the work day (and a message was sent), and it was resolved after hours. I would want the reset action to occur. Otherwise, I get the error but not the message that it was resolved.

To handle this criteria, here is an example that may explain this better. Setup an alert as:

Check the alert often (every minute) 24x7.
The trigger action would be scheduled Mon-Fri 6a - 6p. Add a check box to "Notify if the alert is still active at the beginning of the action period (and the alert was triggered outside of the action period)".
The reset action would be scheduled Mon-Fri 6a - 6p. You would need a radio box to choose "Notify outside of this period if the trigger action occurred during the period". Or, "Delay action until the beginning of the action period". Or "no action needed".

You'll probably want to think this through more, as others may have multiple actions with escalation delays.

Maybe an "alert action counter" would simplify things & allow an option to repeat the action upto "x" times. Plus have an "additional text" field the user can fill in, that is added at the beginning of their subject & message. With this, they could have 1 action, instead of 3 or 4. For alert message 1, they may add "Initial Warning: "; 2 = "Second Warning:", 3= "Critical:"; 4 = "Final:". If the alert action counter is a field & the duration, they should have everything they need. I'll post this as a separate idea.

phillipmanning

Full calendaring as well as specific alert windows would be a lot of benefit. The time definitions need to be more granular than hourly.

It would be great if this could be used in SAM so that we can turn off the monitor on a simple set schedule.