How to create alerts off a SAM multivalue sub-components

Question

Help.

I have a SAM template that has the following component in it.

This component collects data from a powershell script on the remote server.

I cannot find a way to construct an alert that will trip off the two fields that I've identified below.

As a side note, when I try an generate a report for these fields, the only component message that I can work with is "seconds_behind_error".

There seems to be no way (without standing on my head) to separate the distinct component messages.

After poking around the DB, I can see how the separate values are stored in APM_AlertsAndReportsData.

unfortunately the MultiValueStatistics and MultiValueMessages are all lumped together and my SQL isn't that good today.

I've considered separating the values into different components, but that would result in the the PS script being ran 6 times for each polling cycle on the machine.

hailaeos · Answer

Yeah, I have only been using solarwinds since march and coming from Zabbix I have been learning to make this app "Bend the Knee"

cgregors · Answer

Wow, 4 years and you're the only one that answered.

As I remember I slew that dragon a couple of years ago.  Can't remember how.

Thanks for finding this.

Chris

hailaeos · Answer

The best way I have found to to this is on the sub component you must set the thresholds for warning and critical then in the alerts section you can make an alerts

Then for the trigger condition:

if you have swql studio here is a query but I am new to solarwinds and havnet quite gotten the alerts down so that I can get an alert just on my query maybe sometime in the future.

SELECT cs.NodeID, ca.NumericData

FROM Orion.APM.MultipleStatisticData ca

LEFT JOIN Orion.APM.CurrentStatistics cs ON ca.ComponentID = cs.ComponentID

WHERE ca.Name='swap_percent' AND cs.NodeID='44'

Let me know if this helps and or gets you on the right path.