Having a problem creating an alert to tell me when a component goes down. I have a template that has a few EXE processes and a few TCP ports it monitors.
I want to get an alert when the process was present (or the tcp port was alive) and then it goes away/down, or the opposite.
I tried creating one that says "when component status 'has changed'" or creating separate ones that say when it is UP or when it is DOWN, but the problem is during the unknown state periods.
Often due to something (network congestion, ORION congestion, etc) the availability of the component goes to unknown instead of up or down. And this unknown state doesn't constitute a changed status. But if it was up, went unknown, and then goes back to up, the status changed does trigger and we get alerts that it is now up. Problem is we didn't know it was down (or really in this case, unknown).
Anyway have any idea how to get alerts when a component was down but now is up or was up but now is down, skipping altogether the unknown status types?
Thanks!
