Alert Process

Hi, I have a few questions on Alerts:

Is the Alert Reset Condition checked right after the Alert Trigger Condition?

Is the Alert Reset Condition checked independently of the Alert Trigger Condition?

If Alert Trigger Condition is Node Status is equal to Down and Reset Condition is Node Status is equal to Up, would the alert be triggered when any of the nodes is down, and reset when any of the nodes is up? Or would it be reset only when that particular node that was down and triggered the alert is up.

Is there any document that explain the process of alerts in detail?

Find more posts tagged with

Alerts

Accepted answers

mcbridea

Hi sunday,

Alerts work by querying the database for a condition to be true. A trigger condition of Node Status is Equal to Down will trigger if all nodes are marked in the database as down when he query is executed. 100 nodes down will = 100 alerts. The database is updated for node status when the status polling is executed, by default every 2 minutes.

The reset condition of Node Status is Equal to Up will reset for nodes that triggered as down in the last poll but are now up.

Alerts for node 1 and 2 will act independently in the case you have described.

Andy

All comments

mcbridea

Hi sunday,

The alert trigger and suppression are combined into one query. The reset is a seperate query but happens about the same time.

If you want to make your alert specific to a certain node use and ALL condition group.

Use caution including a device name in a suppression. If you were to add the suppression Node name equal to router_1, then if router_1 exists in the database at all then all alerts for that condition will be suppressed.

Here is a paper on Understanding Advanced Alerts that explains these things and gives examples.

routner.JPG

sunday

Thanks for the reply. I have read the paper and have a better understand of Alerts. But it does not explain the Alerts process in detail. So the question still remains:

If Alert Trigger Condition is Node Status is equal to Down, does it mean the alert will be triggered when any of the nodes is down?

And if Reset Condition is Node Status is equal to Up, does it mean the reset will be triggered when any of the nodes is up? even if it is not the node that was down and triggered the alert?

If an alert tripped for Node 1, can the alert trip again for Node 2 without the one for Node 1 being reset?

mcbridea

Hi sunday,

The reset condition of Node Status is Equal to Up will reset for nodes that triggered as down in the last poll but are now up.

Alerts for node 1 and 2 will act independently in the case you have described.

Andy

byrona

Sunday

Have you done any testing with alerts to see how they function. If not, I might suggest you play around with them to get a feel for how they work. The book knowledge is important but having some experience with it is important also.

sunday

Hi byrona

I agree with you totally. I tested alerts but did not get the result I expected. So I want to ensure my concept is right so that I know what result to expect.