Are you able to unacknowledge alerts in SWIS?

tmarndt1

I am able to acknowledge alerts in SWIS, my question is are you able to unacknowledge? If so, I was assuming the process would be similar to the acknowledgment workflow.

Here is some sample code of what I'm sending:

  var request = new JArray();

  var ack = new JObject

     {

          {"DefinitionId", alert.DefID.ToString()},

          {"ObjectType", "Interface"},

          {"ObjectId", alert.AlertObjectID.ToString()}

     };

request.Add(ack);

var body = new JArray { request };

var postAlert = _Post(body.ToString(Formatting.None), "Invoke/Orion.AlertActive/Unacknowledge");

Here is the format of the body sent to SWIS:

[

  [

    {

      "DefinitionId": "f6126e8c-80c3-4d5c-ad02-b677285472d1",

      "ObjectType": "Interface",

      "ObjectId": "189"

    }

  ]

]

tdanner

See this wiki page: https://github.com/solarwinds/OrionSDK/wiki/Alerts#verb-unacknowledge

This verb expects a single argument: a list of AlertObjectID values. To unacknowledge a single alert, the post body would look like this:

[

   [ 12345 ]

]

You might be interested in a .NET library to help with making Orion API calls: OrionSDK/Samples/CSharp at master · solarwinds/OrionSDK · GitHub

With an ISwisClient instance from that library, this verb call would look like this:

ISwisClient swis = // init from somewhere

await swis.InvokeAsync("Orion.AlertActive", "Unacknowledge", new[] { 12345 });