Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

EMail stating Alert has been Acknowledged

Is there any way to get Orion to send an e-mail stating that an alert has been acknowledged (at this time, by this person.) I am having a hard time getting anything to work.

I tried creating an Alert that stated when AcknowledgedBy has changed to send an e-mail. That didn't work.

I have created a report that stated which alerts have been acknowledged, but the report scheduler only runs once a day, not whenever something in that report changes.

Is there anyone that has a suggestion? Or maybe a sql customization trick that I can use? Any help is much appreciated. Thanks.

Find more posts tagged with

Accepted answers

Capt._Obvious

#1 Create a Custom SQL alert

#2 Set up your trigger query for NODES

#3 paste the following into the white box:

inner join AlertStatus on Nodes.Caption = AlertStatus.ObjectName
where AlertStatus.Acknowledged <> 0 and acknowledgedtime > DATEADD(mi, -5, GETDATE())

#4 do not trigger until... set to 0 seconds

#5 reset condition - paste the following in the white box:

inner join AlertStatus on Nodes.Caption = AlertStatus.ObjectName
where AlertStatus.Acknowledged <> 0 and acknowledgedtime > DATEADD(mi, -5, GETDATE())

#6 do not reset until... set to 0 seconds

#7 in whatever action (email etc) you choose add the following:

----------------------------------------------------------------------------------------------------------------------------------------------------------------
${SQL: select top 1 alertname from alertdefinitions where alertdefid in (select alertdefid from alertstatus where activeobject = ${nodeid})}
on ${Nodes.caption} was
Acknowledged By:
${SQL: Select top 1 acknowledgedby from alertstatus where activeobject = ${nodeid}}
On
${SQL: Select top 1 acknowledgedtime from alertstatus where activeobject = ${nodeid}}
Notes:
${SQL: Select top 1 substring(notes,16,200) from alertstatus where activeobject = ${nodeid}}
_____________________________________________________________________________

#8 eat a healthy snack or something

All comments

Capt._Obvious

#1 Create a Custom SQL alert

#2 Set up your trigger query for NODES

#3 paste the following into the white box:

inner join AlertStatus on Nodes.Caption = AlertStatus.ObjectName
where AlertStatus.Acknowledged <> 0 and acknowledgedtime > DATEADD(mi, -5, GETDATE())

#4 do not trigger until... set to 0 seconds

#5 reset condition - paste the following in the white box:

inner join AlertStatus on Nodes.Caption = AlertStatus.ObjectName
where AlertStatus.Acknowledged <> 0 and acknowledgedtime > DATEADD(mi, -5, GETDATE())

#6 do not reset until... set to 0 seconds

#7 in whatever action (email etc) you choose add the following:

#8 eat a healthy snack or something

jason.partridge

OK, I'm no SQL guy by any stretch... and I'm a little confused. I created a separate alert, followed your instructions and I get the following in my email:

ACK email
on cplt-252.cpl.local was
Acknowledged By:

On
12/30/1899 12:00:00 AM
Notes:

Now, I'm on 10.2.2, and maybe something has changed, but I really want to be able to do this, as it will make my life much easier...

am I supposed to create the alert that I want, (i.e. cpu over 80% on XYZ node) in the same trigger statement as your above posted SQL query? Or should it be a separate alert as I have it now, but something isn't quite right?

I should have looked into this a year ago, but well, didn't....

Thanks,

Jason

mrxinu

Hey Jason,

The alert he gave you is just for the recently acknowledged alerts. The actual alerting has to be done separately - i.e., your CPU over 80% utilized alert. It looks like you might have some portion of what CO laid out for you configured wrong. Time for some screenshots -c an you get us one of the trigger action and one of the body of the email so we can make sure you got everything in there correctly?

scottwe

Hello, I've tried this solution, even had a healthy snack. This alert is not working for me but I would love to learn how to fix it. SQL validates when I push the button and the email test sends me the text in the message body without substituting data for the variables. One thing I noticed is that my alert and reset condition are the same.

1. Made a new alert and enabled it.

2. Trigger Condition - Custom SQL alert, Node, 0 seconds

inner join AlertStatus on Nodes.Caption = AlertStatus.ObjectName

where AlertStatus.Acknowledged <> 0 and acknowledgedtime > DATEADD(mi, -5, GETDATE())

3. Reset Condition - reset when the following conditions are met, 0 seconds

inner join AlertStatus on Nodes.Caption = AlertStatus.ObjectName

where AlertStatus.Acknowledged <> 0 and acknowledgedtime > DATEADD(mi, -5, GETDATE())

4. No suppression, Any time of day

5. Trigger actions - send an email

${SQL: select top 1 alertname from alertdefinitions where alertdefid in (select alertdefid from alertstatus where activeobject = ${nodeid})}

on ${Nodes.caption} was

Acknowledged By:

${SQL: Select top 1 acknowledgedby from alertstatus where activeobject = ${nodeid}}

${SQL: Select top 1 acknowledgedtime from alertstatus where activeobject = ${nodeid}}

Notes:

${SQL: Select top 1 substring(notes,16,200) from alertstatus where activeobject = ${nodeid}}

marunderwood

That didn't work for me when there was more than one alert on the same node. I came up with another solution, see http://thwack.solarwinds.com/ideas/1142#comment-163548 for details.