Include multiple node variables in alert email

FormerMember

We have a VPN tunnel that will go down and receive two alerts for both interfaces going to and from the remote site. We want to reduce the amount of alerts down to one.

I think I have the logic of the trigger condition, but I'm having issues putting variables for both nodes in the same ticket.

Is there a way to write an email in the following format similar to how I'm using these pseudo-variables?

Email: VPN Tunnel Down

Body: Tunnel down between [down tunnel interface on node 1] on [node 1] and [down tunnel interface on node 2] on [node 2]

FormerMember

Figured out the solution:

1. In trigger condition, enable complex conditions
   1. 
2. For node/interface/custom poller instance select all interfaces you want in this alert. In my case I selected all VPN tunnel interfaces
3. Set "Alert can be triggered if _____ objects (at the same time) have met the specified condition and then trigger single alert" to 2 (or more depending on your needs.)

Example:

Alert: Looks for 2 interfaces going down and sending details in alert.

Trigger Condition: Add the interfaces to Interface Instance is (select your objects), then include steps above.

Trigger Email:

Down interface on {interface variable}

Occurred at HH:MM:SS

You'll notice that I only put in one variable, but am monitoring multiple objects. This actually generates a single email alert like this:

Trigger Email:

Down interface on interface1

Occurred at HH:MM:SS

Down interface on interface2

Occurred at HH:MM:SS

It's essentially smart enough to cycle through the alert for each object in the alert. If 2 objects go down but you're monitoring 3 objects, your alert email will cycle through the variables for each object that triggers the alert and included all in a single email.

I didn't see this in any documentation or on Thwack, so I hope this helps someone!