Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Using custom fields in alert triggers and setting actions by time

Hi guys, fairly new to this so bear with me...

We have a fairly complex network monitoring different managed customers sites, spread accross the globe.

I've created a custom field called Upstream_Device that is populated with, you guessed it the name of the upstream device.

I want to create an alert that triggers if the node goes down as long as the node detailed in Upstream_Device is up, this is to save me having to create separate triggers for every site we monitor, and more importantly making admin easier as sites come into management and go out of management.

Basically

If node equals down

And

If node called Upstream_Device is up

Second question I'd like to modify the trigger actions by time of day, ie mon-fri 8-6 email this person, outside of these hours email this person and run this program to send an SMS alert. Again trying to keep it simple and reduce the number of alerts that I have to have on the system, I know I can do it by creating 3 alerts, mon-fri 08:00-18:00, mon-fri 18:00-08:00 and sat-sun 00:00 - 23:59, however doing it in a single alert makes life simpler for admin.

Find more posts tagged with

Accepted answers

All comments

cfry

I also monitor a complex network which covers 14 global regions with anywhere from 2 - 14 locations within that region, altogether 90 sites. Each of these site has a primary router which connects to our MPLS and a back-up router connection to the internet. The central HUB is at my location here in Hercules. Like you, I needed to set up an alert and "subscription" service to be notified when the routers at these remote sites go down and come back up. If a router goes down and stays down longer than 5 minutes (ruling out "flapping"), I get and alert and open a case with our engineers to resolve the issue. When the router recovers and stays stable for 10 minutes, I receive an alert that the router is restored. I needed to set up a subscription service to send these alerts to business partners in a way they choose (SMS, e-mail, Time-of Day, etc.). I used Solarwinds to put the alert into business language and Alarmpoint subscription service to accomplish this. Does this sound similar to what you're trying to do? If so, I may be able to help.

morgolis

Danny,

In order to set up alert suppression for each of your customer monitored environments, you will need to set up a specific alerts and suppression for each customer. There is no way to dynamically do what you're thinking of.

You would need to set up two custom properties, one called something like customer and the other called Upstream_Device. Every node that is being monitored by you for customer X would be added to that customer property including the edge device. You would only mark the edge device within the 'Upstream_Device' for customer X.

You would need to create a specific alert for each customer to notify when the children nodes are down, but suppress when a customer specific edge device is down. Then a single alert to catch when any edge 'Upstream_Device' is down.

Sorry about all the edits, I had to rethink this a couple times.

Follow?