I need to integrate information from Solar Winds in our ticketing application. When looking at the schema for alerting, I see that the two primary entities are Orion.AlertActive and Orion.AlertObjects. I'm unclear on how the ID's for these tables work though.
- If I have an alert that is triggered by a particular node, clears, and then is triggered again several hours or days later, does that second instance have a new AlertActiveID in Orion.AlertActive? Because of the Acknowledge-related properties, my guess is yes, but I'd like to confirm.
- If so, what about Orion.AlertObjects; does this also get a new AlertObjectID for the second AlertActiveID? My reading of the schema suggests no, that AlertObjectID stays the same for the same combination of (AlertID, EntityUri) because of the TriggeredCount and LastTriggeredDateTime properties, but I can see where maybe this is also effectively tracking the number of times the trigger conditon was met for just one AlertActive instance.
Thanks for any help!