Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Can I disable alerts for a single device while still monitoring it?

We run a network of Cisco 3750s LAN switches that aren't capable of generating NetFlow data. So to collect NetFlow data, we've installed these Dragonfly NetFlow collection devices. We create a SPAN session on one of the core 3750s and the Dragonfly appliance captures the data from the SPAN port, converts it to NetFlow format and sends to our SolarWinds server to be displayed in NTA.

In order for NTA to receive NetFlow data from a device, you have to first add the device and it's transmitting interfaces as managed elements in Orion. So we set this all up and we're receiving NetFlow data and it's displayed in NTA as you would expect. The only problem is that, for whatever reason, Orion sees this Dragonfly appliance as rebooting every nine minutes. The appliance itself isn't rebooting - I know this because I've run continuous pings to it over that period and it never goes down - but for some reason Orion sees it as rebooting. As a result, an e-mail alert is generated, so as long as we're collecting Netflow data from this Dragonfly appliance, we're receiving e-mails every nine minutes telling us that it rebooted. Needless to say, this can get very annoying.

So my question is: is there a way to monitor a device but at the same time configure Alert Manager so that e-mails are not sent out when it reboots? I guess the question could be specific to Alert Manager: can we disable alerts for specific devices? From what I've seen in Alert Manager, it appears that alerts are generated according to specific conditions and thresholds (e.g. a reboot or interface utilization), but not on a per-device basis.

Thanks.

Find more posts tagged with

Accepted answers

jeff.stewart

You could add something with this logic to your current alert;

Vendor not equal to Dragonfly.

This would alert you on any nodes that are down except the ones that are equal to that vendor (or other properties).

All comments

jeff.stewart

You could add something with this logic to your current alert;

Vendor not equal to Dragonfly.

This would alert you on any nodes that are down except the ones that are equal to that vendor (or other properties).

FormerMember

That might just work. Orion hasn't been able to discover the Dragonfly vendor type, but I can define it in the node's Custom properties, then match on that in Alert Manager. I'll try that and see if works.

Thanks.