Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Need Help with Solarwinds Alerting

Hello, my name is Taran. I am relatively new to Solarwinds and was wondering if i could get some help with an issue i am having.

I am a Network Analyst working for a service provider, Comtech Communications in Canada.

We have a customer who has multiple locations that we provide monitoring and support.

I have setup an alert in Solarwinds that emails me when any of their sites utilizes over 90% of the bandwidth allocated to them for over a 20 minute period.

However, I am getting duplicate alerts when the condition is triggered. I would only like 1 alert when the condition is triggered.

The ALERT EVALUATION FREQUENCY for the alert is 5 MINUTES.

The trigger action is: do not trigger this alert until condition exists for more than 20 MINUTES.

I have included a screenshot below of what the trigger condition looks like. Is anyone able to help/advise?

Find more posts tagged with

Accepted answers

All comments

cjfranca

from what I understand u have several sites of a client, and receives alerts from each of them, even if the same client.
Well, I think if you get the warning that the site is a group with that meets your needs.
then you can create a group to add these sites in that group. when a group object pass bandwidth ...
I do not know if that helps. You have to test.

FormerMember

We'll probably need to see more in the configurations of the Alert, namely in the "Trigger Actions" tab. I suspect there is an inadvertent duplication of the notification action in there somewhere.

tgill80

Here is a screenshot of the Trigger Actions tab. Action is sending an email to myself and a couple other colleagues at Comtech.

Trigger Action.PNG

tgill80

The alerting is setup to potentially receive emails about several sites.

However, only 1 site is exceeding 90% of the bandwidth allocated to them.

FormerMember

In the email alert, check and see who the recipients are. Maybe you are explicitly listed in there, as well as part of a distribution list (thereby generating the duplicate message).

tgill80

Here is a screenshot of the recepients. No email address in the CC or BCC field.

Email is being sent to the same 3 email address in the Reset Actions tab.

Solarwinds Email Addresses.PNG

rschroeder

I suspect the duplication comes from one alert monitoring Send AND Transmit.

If one interface exceeds the threshold on the Send, that's one alert. When the matching other interface exceeds the threshold for Receive, that's a second alert.

One way to test this would be to separate the two conditions into completely separate alerts. The Trigger Action on one should contain a subject that identifies it specifically for Transmit Threshold exceeded.

The Trigger action on the other needs a subject of Receive Threshold Exceeded.

You could even configure it to send one to one person (as a test) and the other to a different person (again as a test).

You'll be able to see if you're getting dual alerts by having dual conditions, with the option "Any" being responsible.

tgill80

I will give that a try and see how it goes.

Thanks.

tgill80

I have completed my testing and confirmed that the duplicate emails were caused by the my original alert monitoring both Send AND Transmit.

I have now separated the 2 conditions into separate alerts and am no longer getting duplicate emails.

Thanks for your help.

rschroeder

Good work!