Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Multiple Notifications from alert

I have setup the Advanced Alert below and it is working, however, when it send out the e-mail notification I get anywhere from 10 - 16 notifications depending on the server. Why am I getting so many alerts for the same thing? Any help is greatly appreciated...

IIS alert.JPG

Find more posts tagged with

Accepted answers

All comments

mcbridea

There are probably multiple components being triggered. Does the alert message tell you which component triggered?

gbutler

One thing that I started doing when working with alerts that has been a big help is to have a SQL connection to the solarwinds DB open... after I create the alert I test my trigger by cut & paste the SQL trigger statemen (found under alert definitions) into the SQL server manager.

You can toggle the status to check to see what you get.

I find a LOT of typos when I do this. In your case you could see the exact number of hits when it triggers and why.

lortigo

This is the output I am getting when I test the alert:

4/22/2010 11:27:47 AM: Initiating test for alert TXFB-SRVR - IIS Services - Level 1 Escalation.
4/22/2010 11:27:47 AM: Retrieved 1 actions for alert TXFB-SRVR - IIS Services - Level 1 Escalation.
4/22/2010 11:27:47 AM: Preparing action type EMail to test alert TXFB-SRVR - IIS Services - Level 1 Escalation.
4/22/2010 11:27:47 AM: Email 'ALERT: ${Node.Caption} - ${Node.Administrator} - IIS Service Alert' from 'ALERT: ${Node.Caption} - ${Node.Administrator} - IIS Service Alert' to '"Orion Notification" <orion@txfb-ins.com>' has been successfully handed to the local mail handler for alert TXFB-SRVR - IIS Services - Level 1 Escalation.
4/22/2010 11:27:47 AM: Action type EMail for alert TXFB-SRVR - IIS Services - Level 1 Escalation completed successfully.
4/22/2010 11:27:47 AM: Completed action type EMail for alert TXFB-SRVR - IIS Services - Level 1 Escalation.
4/22/2010 11:27:47 AM: Completed test for alert TXFB-SRVR - IIS Services - Level 1 Escalation.

It does not explain why I am getting the message 16 times....It is almost like it is sending an alert for every component listed under IIS. I just want it to send one message...not 16.

Does that make sense?

mcbridea

It does not explain why I am getting the message 16 times....It is almost like it is sending an alert for every component listed under IIS. I just want it to send one message...not 16

Yes - your alert trigger is set to trigger on the IIS components being not up. This will apply to all the components.

You could suppress by modifying the component trigger: add a condition group component status not up AND app status down OR app status is unknown. This should alert you for components when IIS is still up but if IIS fails you wont get all the component alerts.

gbutler

The output you provided from copying your triggers should list the nodes... here is what I was refering to... this is just a generic routine I have been doing to test/validate what nodes will be triggered (see attached).

Trigger.pdf