Advanced Alert Trigger Condition Woes...

Here is what I'm trying to accomplish. If site 1 is up, and site 2 through 5 are down, trigger the alert.

I've tried various methods, nested container groups, etc and have had no luck.

Actually, I've never had any success making reference to a particular node in an Advanced Alert trigger. Maybe that is the root of my problem. How do you go about doing it?

I'm on NPM 9.5.1

Find more posts tagged with

trigger_conditions

orion

advanced_alert_gui

Accepted answers

All comments

nding

Hi MagnAxiom,

Firstly, I would like to confirm if the Site that you have indicated is a Node or it is a group of Nodes?

If Site that you are indicated in this post is really Nodes, the following should work:

Trigger Alert when ALL the following apply
   Node Status is equal to Down
   Trigger Alert when ANY of the following apply
      Node Name is equal to Site2
      Node Name is equal to Site3
      Node Name is equal to Site4
      Node Name is equal to Site5
   Trigger Alert when ALL of the following apply
      Node Name is equal to Site1
      Node Status is equal to UP

* Note the indenting, and also this alert is set for ALL nodes.

HTH.

MagnAxiom

I have setup the alert structure as you outlined and it doesn't work.

To give you a bit more background, when I say site I do mean a monitored Node, generally an ICMP monitored node.

The "Control" node is a Motorola Canopy Access Point, it provides point to multipoint connectivity to the "Sites" 1 - 3 in this test. So if the Motorola AP is UP (It's on battery backup) but the sites it provides connectivity to are down (Field sites in an Oil field without backup power) then we probably have a power outage to the field. If however our AP is offline, it isn't necessarily a power outage, as we could have the device down for maintenance.

For testing I have created virtual layer 3 interfaces on a router and added each of the nodes listed above as a node in Orion with ICMP polling. I shutdown an interface to create a "down" simulation. I show the nodes go Red (Down) in Orion but have no email sent to me (Yes, I have the Trigger Action setup to send just me a test email)

Thanks for your help.

scottd

The status may have changed to 'shutdown' instead of 'down' if you administratively shut it down.

mcbridea

Hello Mag,

Do you know if the SMTP configuration is working? The reason I ask is that we get a lot of these with the problem being that the SMTP settings were not valid. Can you test the email with a very simple alert?

MagnAxiom

scottd, I added them as nodes with ping (ICMP) polling only, so they know nothing of interface statuses. They show as DOWN in Orion when I shut the interface since the IP they are pinging no longer responds.

MagnAxiom

I know the SMTP configuration is fine because the system is emailing me on all my other alerts.

byrona

Hrm, I can't be sure of this but I think you may have conflicting conditions....

At the top you say Node Status is equal to Down, at the bottom you say Node Status is equal to Up

My guess is that these two are in conflict with each other making the statement impossible to meet.

You should take a look at the SQL statement in the database for this alert to see if this might be the case.