Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Alerting on Response time for 5 or more nodes in same city where condition exists for 30 mins

The above alert logic should be triggered if you have 5 or more devices with a 500ms response time for more than 30 minutes within a common city.

The alert does not seem to be working as desired.

The response time part of the alert should be good.

The condition of more than 30 mins or more should be good.

The Question is of the City piece. Is this causing the alert not to trigger?

We want the city to be the same on the device that trigger the alert but not have to configure an alert for each city.

Any suggestions or recommendations

Find more posts tagged with

Alert

network_monitoring

npm

Alerts

Accepted answers

All comments

Lofstrand

Will probably not work with that variable in there.

Try this. Changing the alert to a "Custom SWQL alert" on Node and use below query:

-- Customizable part

INNER JOIN

(

SELECT

MAX(N.Uri) AS Uri

,N.CustomProperties.City

,COUNT(N.nodeid) as QTY

FROM Orion.Nodes as N

WHERE

N.ResponseTime>500 -- The Response time to trigger on

AND N.CustomProperties.City IS NOT NULL

GROUP BY

N.CustomProperties.city

HAVING

Count(N.nodeid)>4 -- Number of nodes in city that has to be down
) AS T ON Nodes.Uri=T.uri

Will look something like this then: