Filtering Alerts

Hello,

I am new to the forums, and I have searched for an answer to an issue I am experiencing without any luck. Solarwinds tech support has not been very helpful, I am still waiting for a reply back and its been 3 days (I have sent screenshots and followup emails). I am trying to configure email alerts using Alert Manager, what I am trying to do is email an alert when a disk volume on a node is under 5 GB. Now I do have this working but I need to filter out certain nodes since they have less than 5 GB of storage to begin with or they are a Citrxi provisioned server and in which the space doesn't matter. As of right now I get about 200 emails every 5-10 mins, and 60% of them I don't need alerts for. I have tried wildcards * and %, I have tried contains (wildcard text) without any luck. I have attached a screenshot of my alerts.

Trigger Alert:

Volume Space Availabe is less than 5000000000
VolumeType is equal to Fixed Disk

Trigger Alert when none of the following apply
field Full Name contains PVXA

field Full Name contains HUB

field Full Name contains PRNT

field Full Name contains TEST

field Full Name contains UTILS

field Full Name contains WIFI

field Full Name contains XD-

field Full Name contains /boot

field Full Name contains cache

field Full Name contains /rom

Any help is appreciated.

disk_under_5gb.png

Find more posts tagged with

alert_trigger_condition

Alerts

Accepted answers

mharvey

As well for your alert, you'd want to use not all rather than none. The logic behind the scenes is set up where none would cause any of those conditions to still trigger. I'd also recommend using simple conditions rather than complex so have:

Trigger when not all of the following conditions apply:

Node Name contains '%'PVXA%'

etc

This should finish the alert you are working on.

All comments

mharvey

I'd recommend a different approach. I'd create a node custom property called Disk_Alert and make this a yes/no property. Mark the device you want to alert on with a yes, then add a simple condition of Disk_Alert is equal to yes. This will cut down on the number of conditions you need to have in the alert, and had one field that needs to be changed on new and existing nodes, rather than having to edit the alert to add a new condition for each possibility.

Thank you,

Matthew Harvey

Senior Sales Engineer

Loop1 Systems

drose.leavitt

That is a good idea, but it will take a long time to edit over 1000 Nodes

mharvey

Not really, using the custom property editor you can edit en mass, or do a quick update from the database end of Update Nodes set Disk_Alert = 1 where ...... and just fill in the criteria you want to add. You can also select devices en mass in Node Management and change the value. While it would take some time, the end result may be a little cleaner.

mharvey

Trigger when not all of the following conditions apply:

Node Name contains '%'PVXA%'

etc

This should finish the alert you are working on.

drose.leavitt

Thank you for the quick replies, I am waiting for the alerts to trigger and well let you know if the above works. If not I will have to fall back to your original post.

drose.leavitt

I would also like to know if the trigger conditions are case sensitive?

mharvey

No, the trigger conditions are not case sensitive since the database is installed in a case insensitive setup.

drose.leavitt

Thank you for the help, after your guidance I think I got it working with the following .. I also added another trigger for disk space under 5 gb to just ignore it.