Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Solarwinds advanced alerting emails and ID Correlation

Good Morning Solarwind Peeps

Very quickly does solarwinds either NPM or SAM Have the ability to send its advanced email notification out with a unique identifier within the body of the email?? the obvious answer is the Asset/Server name is the unique identifier but that may not be suitable for the purposes I'm trying to achieve.

Basically I currently have our call logging system generating incidents from the advanced alerting. I'm looking to take this a step further so that the "Cleared" Alert updates the existing/live incident within our logging system. It can be done by writing scripts into our logging system which I can get done but it will only run if the email contains a Unique id,

Many thanks

Dan

Find more posts tagged with

Accepted answers

All comments

aLTeReGo

If you're looking for a globally unique identifier for each alert then I would recommend using the '${N=Alerting;M=AlertID}' macro. If you're looking for a unique object ID for each managed entity, then use the appropriate ID variable. For example a node you would use the '${N=SwisEntity;M=NodeID}' macro. If it was a volume, then the macro would be '${N=SwisEntity;M=VolumeID}'.

daniel.candy

Alterego you da man

So you've given me some very good info there.

As an example server Node "dan01" as "disk1 " raises an incident into ServiceNow. Service now has an active incident for disk alert Dan01. When that disk threshold alert clears, the alert clears in solarwinds and triggers an email to our service desk mailbox, we manaually update that active ticket.

In my preferred method I want the same thing to happen but the active incident that was raised to be updated instead of the SD Guys updating the ticket manually. I have a service now developer who can help with the scripts etc on the Snow side. He basically advised "specifically, get some sort of correlation ID out of the incoming email" hence the query around the Solarwinds Side of it.

Dan

aLTeReGo

You may want to hold off a little while as native ServiceNow integration in Orion is currently available in Beta. You can sign-up for either the SAM 6.3 or NPM 12 betas and give it a try yourself.

https://thwack.solarwinds.com/thwack-beta.jspa?groupID=1003