Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Phantom alerts with no content

We very recently have started getting 8 email alerts in a bunch that contain no data, only the alert formatting. They all happen exactly once an hour at the same time, and look like this:

Component ${N=SwisEntity;M=ComponentAlert.ComponentName} on Application ${N=SwisEntity;M=Application.ApplicationAlert.ApplicationName} on Node ${N=SwisEntity;M=Application.Node.Caption} is ${N=SwisEntity;M=ComponentAlert.ComponentAvailability}

This looks like a SAM alert, but i'm having trouble tracking down what exactly is triggering these alerts.

I'm wondering if any one can advise me on how to best track down what the trigger is, maybe as they (the alerts) are all happening at the same time i could track down what is being polled at that time?

Not 100% sure but nothing in Orion pops out as the potential cause. I deleted any SAM monitors that were newly set up before these phantom alerts started happening, however the alerts still kept coming, so i dont believe those new monitors are the cause. Any help would be greatly appreciated.

Thanks in advance!

Find more posts tagged with

Accepted answers

All comments

aLTeReGo

The message text looks very similar to that of the "Alert me when a component goes into warning or critical state" and "Alert me when a component goes down" alerts. I would try disabling those alerts for an hour and see if you stop receiving notifications. You could also add the "${N=Alerting;M=AlertName}" macro to all your alerts so you will know precisely the name of the alert that is responsible for the notifications you receive.

alexnetworkeq

Thanks a lot for you reply, sorry it took me a while to respond!

I think my original question was slightly incorrect. I believe i know what alert is causing them, but not the node. I found the alert i think was causing these messages, and added the variable as you suggested. But a funny thing happened when i added ${N=Alerting;M=AlertName} to the alert trigger action, those phantom alerts suddenly stopped! Bit of a mystery.