Alert Acknowledgement Logging

Is there any way to see who acknowledged an alert that has already cleared?

It seems to only store this in the current status table and not in the alert log. If there's no way currently to gather this information, can it be added as a feature request? Thanks.

Find more posts tagged with

advanced_alerts

advanced_alert

Alert

Alerts

Accepted answers

All comments

MarieB

HI bknutson--

I've marked this for the PM to review as I don't think it's currently supported at this time.

Also, have you checked our alert tutorials? They are on our tutorial page. They might give you some insight:

http://www.solarwinds.com/support/tutorials.aspx

HTH,

Detroiter

Bumping this topic. I ran into this issue last week. I have an EOC report that displays active alerts, but not those that have been acknowledged. A volume went Critical and the alert was triggered, I have a clear record of that. However, the EOC Team claims the alert never appeared on their screens. The only way for that to have happened was in the alert had been acknowledged. Unfortunately I cannot PROVE that without some kind of acknowledgement log.

i have change all the alert log tables and views int he database. Even checked Events, but that data does not seem to be kept in any of them.

mharvey

The information is kept in the AuditEvents table for about a year. It should be in there.

Detroiter

AuditEvents...should've looked there. Found the info I needed. Thanks.