Slack-proof trigger action for volume capacity forecast alerts?

akhasheni

It's a known issue that Slack, PagerDuty and other XML-based trigger actions trip on unescaped backslashes.

For straight Volume alerts, it's usually resolve by substituting Volume Caption variable with this statement that basically escapes backslashes.

${SQL: SELECT REPLACE(Caption, '\', '\\') FROM Volumes WHERE VolumeID = ${VolumeID}}

Question: how do I modify this to make it work for volume capacity forecast alerts? (The only ones where volume thresholds are accessible.)

My usual one below works for *nix paths, but not Windows.

payload={"channel": "@slackbot&quot;,"username": "solarwinds","color": "Warning","text": "<${N=Alerting;M=AlertDetailsUrl}|${N=Alerting;M=Severity}>: `<${N=SwisEntity;M=Volume.DetailsUrl}|${N=SwisEntity;M=Volume.Caption}>` on `<${N=SwisEntity;M=Volume.Node.DetailsUrl}|${N=SwisEntity;M=Volume.Node.Caption}>`: ${N=SwisEntity;M=Volume.VolumePercentUsed} used."}

Thank you!

akhasheni

zackm​ posted an answer in Alerting on Volume Thresholds​ (where I asked the same question):

have you tried replacing ${VolumeID} in your SQL variable with ${N=SwisEntity;M=Volume.VolumeID}

Tested - Zach's suggestion worked!

The resulting statement is then:

${SQL: SELECT REPLACE(Caption, '\', '\\') FROM Volumes WHERE VolumeID = ${N=SwisEntity;M=Volume.VolumeID}}

... and the full trigger action (tested, working):

payload={
"channel": "@slackbot",
"username": "solarwinds",

"text": "<${N=Alerting;M=AlertDetailsUrl}|${N=Alerting;M=Severity}>: <${N=SwisEntity;M=Volume.DetailsUrl}|`${SQL: SELECT REPLACE(Caption, '\', '\\') FROM Volumes WHERE VolumeID = ${N=SwisEntity;M=Volume.VolumeID}}`> on <${N=SwisEntity;M=Volume.Node.DetailsUrl}|`${N=SwisEntity;M=Volume.Node.Caption}`>: ${N=SwisEntity;M=Volume.VolumePercentUsed} used.
"}

Thank you zackm​!