Settle an argument between me and my boss.

trilobite_rex

Hi Thwackers.

My boss and I had a discussion today and I need your help to settle an argument.  We recently had to beef up our server and our polling engine due to it being sluggish.  My boss is saying that we have to lessen the scope of the alerts that go out, 

Here is what I mean by this.

My thought is that if you create a SAM monitoring (see screen shot #1).

Then an alert is created to email out to the group.   here is how it was created.

So does this mean that the scope of the alert searches ALL nodes looking for that service? 

or

am I right that it is only looking for the nodes it was assigned to?

or

Neither

or

Both somewhat right?

Thanks in advance

jeff

sean.martinez

The Alert currently configured will only check when the entire Application name is iMFmaSvc, it needs to be contains for it to function.

The best practice is that you should try to setup as few Alerts as possible to encompass as many Applications as possible. These alerts get ran against the database every minute. Lets say you have 200 applications, if each application had an alert, 200 alerts checking every minute, 1440 minutes a day, so that means the database is scanned 288,000 times a day. Reducing the number of Alerts to use Custom Properties or Warning and Critical levels will reduce the need of similar alerts needed to be created, and reduce the impact on the MS SQL Server database.

What you can do is remove the Application Name, and just use the Status of the Node and Application. What I would then do is create a Custom Property Field (Point_of_Contact) and enter the Application or Nodes POC's email address to that field, this way the To field would be ${Point_of_Contact} that would auto-fill the email address. This document covers it in more detail Using Custom Properties sending Alert emails