Hello..
I've have configured few alerts which triggers when some specified traps received from network devices( ex: ospf neighbor state change traps, power supply traps).
Below is an example alert(SWQL) configured for ospf neighbor state change trap.
SELECT Nodes.Uri, Nodes.DisplayName FROM Orion.Nodes AS Nodes
WHERE Nodes.NodeID IN ( SELECT T.NodeID FROM Orion.Traps T
WHERE (T.TrapType LIKE '%ospf%NbrStateChange%' OR T.TrapType LIKE '%ospfTraps.0.2%')
AND T.DateTime > ADDMINUTE(-2, GETUTCDATE()) )
when we execute this query in database will see only the nodes having the ospf traps for last 2 mins, but sometimes solarwinds is triggering alerts for all nodes having ospf traps for all records in the database.
Can i get some assistance here please.....
--Thanks!