Share your Alert variables

nato

Please share your Variables here.

Find more posts tagged with

alert variables

Accepted answers

All comments

jberg246

I agree why reinvent the wheel - if someone has great alerts - Share them

saw10

Not sure is this is what you are looking for. Here are couple of of Trigger and Reset Email action where we use variables.

NOTE - The variables change with the Object Type these two one is for an interface and the other is for a Node.

=========== TRIGGER ACTION ===========

ORION ALERT: HIGH ${N=Alerting;M=AlertName} BREACH High interface utilization on ${N=SwisEntity;M=InterfaceName} on ${N=SwisEntity;M=Node.Caption};

EVENT TIME: ${N=Alerting;M=AlertTriggerTime;F=DateTime};

TRANSMIT

UTILIZATION: ${N=SwisEntity;M=OutPercentUtil};

This Hour

ERRORS: ${N=SwisEntity;M=OutErrorsThisHour};

DISCARDS: ${N=SwisEntity;M=OutDiscardsThisHour};

CRC ERRORS: ${N=SwisEntity;M=CRCAlignErrorsThisHour};

RECEIVE

UTILIZATION: ${N=SwisEntity;M=InPercentUtil};

This Hour

ERRORS: ${N=SwisEntity;M=InErrorsThisHour};

DISCARDS: ${N=SwisEntity;M=InDiscardsThisHour};

ALERT NAME: ${N=Alerting;M=AlertName};

ALERT ID: ${N=Alerting;M=AlertID};

EVENT ID: ${N=Alerting;M=AlertActiveID};

NODE: ${N=SwisEntity;M=Caption};

NODE IP: ${N=SwisEntity;M=Router.Nodes.IP_Address};

INTERFACE NAME: ${N=SwisEntity;M=InterfaceName};

[

SITE CODE: ${N=SwisEntity;M=Node.CustomProperties.SiteCode};

SEVERITY: ${SQL:SELECT INC_Priority FROM AlertConfigurationsCustomProperties WHERE AlertID = ${N=Alerting;M=AlertID}};

ASSIGN TEAM: ${SQL:SELECT INC_Assign_Team FROM AlertConfigurationsCustomProperties WHERE AlertID = ${N=Alerting;M=AlertID}};

OPTIER1: Malfunction;

OPTIER2: Connectivity;

PRODUCT NAME: Network Connection;

PRODTIER1: Hardware;

PRODTIER2: Network;

PRODTIER3: Connection;

]

=========== TRIGGER ACTION ===========

ORION ALERT: ${N=Alerting;M=AlertName} BREACH ${N=SwisEntity;M=CPULoad} on ${N=SwisEntity;M=Caption};

EVENT TIME: ${N=Alerting;M=AlertTriggerTime;F=DateTime};

EVENT ID: ${N=Alerting;M=AlertActiveID};

ALERT NAME: ${N=Alerting;M=AlertName};

ALERT ID: ${N=Alerting;M=AlertID};

NODE: ${N=SwisEntity;M=Caption};

NODE IP: ${N=SwisEntity;M=IP_Address};

CPU LOAD: ${N=SwisEntity;M=CPULoad};

[

SITE CODE: ${N=SwisEntity;M=CustomProperties.SiteCode};

SEVERITY: ${SQL:SELECT INC_Priority FROM AlertConfigurationsCustomProperties WHERE AlertID = ${N=Alerting;M=AlertID}};

ASSIGN TEAM: ${SQL:SELECT INC_Assign_Team FROM AlertConfigurationsCustomProperties WHERE AlertID = ${N=Alerting;M=AlertID}};

OPTIER1: Malfunction;

OPTIER2: Connectivity;

PRODUCT NAME: Network Connection;

PRODTIER1: Hardware;

PRODTIER2: Network;

PRODTIER3: Connection;

]

=========== RESET ACTION ===========

ORION ALERT: ${N=Alerting;M=AlertName} NORMALIZED ${N=SwisEntity;M=CPULoad} on ${N=SwisEntity;M=Caption}.

EVENT START TIME: ${N=Alerting;M=AlertTriggerTime;F=DateTime};

EVENT END TIME: ${DateTime};

EVENT DURATION: ${N=Alerting;M=DownTime} Minutes;

EVENT ID: ${N=Alerting;M=AlertActiveID};

ALERT NAME: ${N=Alerting;M=AlertName};

ALERT ID: ${N=Alerting;M=AlertID};

NODE: ${N=SwisEntity;M=Caption};

NODE IP: ${N=SwisEntity;M=IP_Address};

CURRENT CPU LOAD: ${N=SwisEntity;M=CPULoad};

[

SITE CODE: ${N=SwisEntity;M=CustomProperties.SiteCode};

SEVERITY: P0;

]