Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Custom duration for CPU alerts

I have thousands of servers that need to be monitored and I would like to keep the number of Advanced Alerts that I need to create to a minimum. One of the things that is not constant is when application owners want to be notified about CPU utilization. Some want to know right away if CPU utilization hits 100%, others don't want to be alerted unless this has gone on for more than 10 mins, etc. I would like to create a custom property for the time threshold. For example 0 would be immediate, 10 would mean that the alert would not trigger until 10 mins have passed that the alert condition is true. I would assume this is possible with a custom SQL query but am not sure how to write it. Can anyone give me some tips or example queries I could use to make this happen?

Find more posts tagged with

Accepted answers

All comments

aLTeReGo

Perhaps there is someone in the community more clever than me (that I have no doubt of) but honestly I cannot think of a way in which to accomplish what you are trying to achieve within a single alert. At best this would need to be two separate alerts. Those that want to be alerted immediately, and those that wish to be alerted if the condition exists for longer than 10min.

adatole

The short answer is that you can't - the delay isn't something that can be fed by a variable within the custom properties.

However, one way I've gotten around this is to create a few versions of the alert with the time difference (CPUhigh-5, CPUhigh-10, etc) and then use the scope (I'm using 11.5 terminology here) to identify which nodes use which alert.

Let me know if that makes sense.