Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Intelligence into alerting

How can we bring more intelligence into the alerting system? I want SAM to understand if a threshold has been crossed 10 times or more in last 24 hours and then send the alert.

The purpose is to bring down the number of high memory/CPU usage alerts which normally recovers under a 10 min.

Find more posts tagged with

Accepted answers

All comments

jvb

Usually people use the "Condition must exist for more than "X"" feature in the alert logic for this. (screen shot below)

Otherwise what you describe would likely have to be done in a custom SQL alert and even then I am not sure it can be done or would necessarily achieve your goal.

chad.every

jvb's answer is the best way, that's how i do it currently for my CPU alerts.

In addition, i modified my alert to not have a hard-coded value. This is a write-up I put together that outlines how to change it.

Modify Alerts To Be Smarter With Node Thresholds

It allows the alert engine to look at each node's threshold so you can customize them per node and use the same alert.

mesverrum

In relation to SAM specifically, that module already has this kind of alerting logic built into the component thresholds.

The only limiting factor in your request is that the tool doesn't let you use more than 60 polls in a set, so to do a 24 hour period I had to spread the polls out to once every 30 minutes, which ends up being 48 polls.

nsingh

Thanks, let me work on this.

adminmd

This might be a silly question, but where in the settings did you go to access this part? What version of SAM are you using?

chad.every

Edit any application template, expand any component monitor and go down to the threshold settings.

2017-06-21 07_45_56-Edit Application Template - HTTP.png

nsingh

i am using SAM 6.4.0, This setting is available under "edit application" or component thresholds.

adminmd

Perfect! Thanks so much!