Alert Based On Number of Active Alerts?

wifig0d

Hey Guys,

I was curious how hard it would be to construct an alert that essentially does an IF THEN using the SELECT COUNT function on the ActiveAlerts table and alerts according to value thresholds? I want to set up an alert that does a special action when there are 0 active alerts, does another action when there is 1 active alert, another at 3, and another at 5+. Obviously the alert itself would be in the table if there were any active alerts, so I would have to subtract 1 from the query results.

Is this possible? I don't mind if it had to be separate alerts for each threshold, but it would be nice if I could make it all in one.

Thanks!

netlogix

I don't think there is a way through an easy GUI, but since SW added the custom SQL alerts, of course you can do it.

I think this might be close to what you want; This alerts when the node is not up and not unreachable and this node already has an alert active:
WHERE
(
  (Nodes.Status <> '1') AND (Nodes.Status <> '12') AND
  Nodes.NodeID in (
           Select ActiveObject from AlertStatus
             where State = 2
             group by ActiveObject
             having count(*) > 0
  )
)

But this might be what you want; This alerts when the node is not up and not unreachable and there is *any* alert active for *any* node:
WHERE
(
  (Nodes.Status <> '1') AND (Nodes.Status <> '12') AND
  (Select Count(ActiveObject) from AlertStatus where State = 2) > 0
)

The last one I think might be what you want; This alerts when the node is not up and not unreachable and this alert is active for other nodes:
WHERE
(
  (Nodes.Status <> '1') AND (Nodes.Status <> '12') AND
  (Select Count(ActiveObject) from AlertStatus where State = 2 and AlertDefID = '<PUT_GUID_HERE') > 0
)

To find the GUID, you can use: SELECT AlertDefID, AlertName FROM AlertDefinitions