Alert if more than X number of Group members is Down. (Only Nodes)

Base alert is this:

All child conditions must be satisfied (AND)
Group - Name - is equal to - [Name] Team
Group Member - Group Member Status - is equal to - Down
And
All child conditions must be satisfied (AND)
Node - Status - is equal to - Down

I have tried the check box "Alert can be triggered if more or equal to X objects (at the same time) have met the specified condition" No luck.

The base alert works, How can I get it to trigger only if X members of Group are down.

Find more posts tagged with

alerts_for_groups

trigger alerts

groups

Accepted answers

All comments

borgan

Would like to do the same thing with interfaces, with one additional requirement. I track the status of T1s at remote sites and I want to get an alert ONLY when more than two T1s are down at the same site. How can I do that?

danostrm

If you know each Pair of T1s that you want alerts on, yours should be simpler than mine.

All child conditions must be satisfied (AND)

Interface A is Down

Interface B is Down

You'd need to create separate alerts for each set of T1s, instead of a single alert , but if its worth it to do

I want to put our critical machines in a group - I want to be alerted if 1 is down, I want to be alerted if 2 are down, 3, 4 , 5 and escalate from there.

jdumke

Did you ever find a solution to this? I'm thinking you would need to do it with SWQL that does a COUNT, but I'm not sure how to do this:

Maybe a combination of these two queries:

SELECT Status, COUNT(*) as DownCount

FROM [dbo].[Containers]

Where (name = 'iSCSI Data Center - iSCSIHost1, iSCSIHost3, iSCSIHost5, iSCSIHost7') and (Status = 1)

GROUP BY Status

HAVING COUNT(*) >= 1

(this query works, but only counts the groups in the Containers table)

SELECT Containers.Name AS PARENTGROUPNAME, P.NAME AS CHILDGROUPNAME, P.NODEID, P.CAPTION

FROM ContainerMemberDefinitions

LEFT JOIN Containers on ContainerMemberDefinitions.ContainerID = Containers.ContainerID

LEFT JOIN (SELECT Containers.Name, Nodes.NodeID, Nodes.Caption, ContainerMemberDefinitions.ContainerID

FROM Nodes

LEFT JOIN ContainerMemberDefinitions ON ContainerMemberDefinitions.ContainerMemberDefinitionID=Nodes.NodeID AND Entity='Orion.Nodes'

LEFT JOIN Containers ON ContainerMemberDefinitions.ContainerID = Containers.ContainerID

WHERE ContainerMemberDefinitions.ContainerID IS NOT NULL) P

ON P.CONTAINERID = ContainerMemberDefinitions.ContainerMemberDefinitionID

WHERE Entity='Orion.Groups'

ORDER BY PARENTGROUPNAME, CHILDGROUPNAME, NODEID

(this last query doesn't work - I copied a similar one from another THWACK conversation - and modified it - this one give s "Failed to enable constraints. One or more rows contain values violating non-null, unique or foreign-key constraints.)

jdumke

The query that would work for us is:

SELECT Count(*) as StatusCount

FROM [dbo].[Containers], [dbo].[ContainerMemberDefinitions], [dbo].[Nodes]

Where (Containers.name = 'XXXX') and (Nodes.Status = '2')

and Containers.ContainerID = ContainerMemberDefinitions.ContainerID

and right(Expression,4) = Nodes.NodeID

I know the query works fine in the Database Manager, and I'm attempting to create an alert with this trigger condition, but I don't know if it will work or not.

jdumke

I was making it too difficult. According to SW Support I just need to use the built in functionality of "Alert can be triggered if" more or equal x " objects (at the same time) have met the specified condition and then trigger single alert.