Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Log for alerts that are sent?

We had an event last week where a few circuits went down. Orion polls every 5 minutes so at worst we'd expect an email sent (the up/down alert is configure to email out) out no later than 5 minutes. Is this a correct assupmtion? If so is there a log I can check to see what time an alert email was sent from Orion? I want to compare it to when another system reveived it. The have the email received 11 minutes after the event happened.

Thanks.

Find more posts tagged with

Accepted answers

All comments

byrona

There are a few things to take into consideration when you determine how long it should take for an alert to be generated. First is your polling interval and second is how often is the alerting engine checking for the alert trigger conditions.

If you have a 5 minute polling interval and and your alert is only checking every 5 minutes for the trigger conditions, worst case scenario is that it could take up to 9 minutes and 59 seconds before an alert is tripped.

If you want to see when an email was sent you will need to go into the database and look at two tables, AlertDefinitions and AlertLog. In the AlertDefinitions table find the alert that you expected to have triggered and copy the AlertDefID and then query the AlertLog for that AlertDefID and you will get all of the alert events for that specific alert

Hope this helps!

BryanBecker

The alert is being checked evey minute...

Actually I checked and polling is set for 120 secoinds fpor status and 5 minutes for statistics. So I'd expect no more than 3 minutes.

byrona

The alert is being checked evey minute...
Actually I checked and polling is set for 120 secoinds fpor status and 5 minutes for statistics. So I'd expect no more than 3 minutes.

The timelines I provided above were only intended for the example on how to determine expectations for alert times; each installation may have different times set but the same logic will apply.

Were you able to use the info I provided to see when your emails were being sent?

netlogix

Also, what is the trigger condition? You may get a delay because it is set to alert on down, there is another delay before it is marked down, check under "Orion Polling Settings", "Node Warning Level"

also, check to see if you have a delay under the trigger condition.