Combine multiple alerts to a single email?

xjohnx

Is there any for Orion to combine multiple alerts being sent at the same time into a single email as opposed to multiple individual emails?

For example, currently if our MPLS link is getting hammered and we begin experiencing latency at a remote site we may receive 12 different alerts from 12 devices alerting us to latency issues on each device. What I would like to see is 1 email, with and inside that email be have the information from the 12 devices experiencing latency. We are currently transitioning from a Raritan to Orion with all the bells and whistles, so I'm hoping that this is something that Orion is capable of. I've included an example message from the Raritan as an example of what I would like to see.

 

Subject: 6 notifications for user IT System Alerts

The following notifications have been received:

 

Notice #22514: [Cleared] Node Up: MSBMCITRIX05, 10.10.1.68

 

Notice #22515: [Critical] Node Lost Service: MSBMCITRIX05, 10.10.1.68, HTTP

 

Notice #22516: [Critical] Node Lost Service: MSBMCITRIX05, 10.10.1.68, Citrix

 

Notice #22517: [Critical] Node Lost Service: MSBMCITRIX06, 10.10.1.66, Citrix

 

Notice #22518: [Cleared] Node Regained Service: MSBMCITRIX05, 10.10.1.68, Citrix

 

Notice #22519: [Cleared] Node Regained Service: MSBMCITRIX05, 10.10.1.68, HTTP

 

Connect to CommandCenter NOC 250 notification detail page: (url)

gbutler

that would be cool. The only thought I had was playing with suppression.  The email that gets sent could have some fancy SQL query that identifies all nodes with the latency issue.

This is only a theory/guess and to be frank I'm not always a good theorist/guesser :-)

But...

Have the alert suppress if another defined node has the triggered condition.... then in the email do the ${SQL: ...} to gather the list of nodes with the defined condition.  SO the first one to trigger triggers then the rest are suppressed.

 

Good luck!