Combine multiple alerts from a single node into a single email

scott.wheeler

I'm admittedly pretty new to the SolarWinds universe still so stay with me here...

I'm working on getting our alerting emails set up. Currently we're getting many thousands of component up/down emails a day. 90% of those emails are along the lines of alerting that 12 different components on a single server all have issues.

Is there any way to combine multiple triggered alerts for a single node into a single email? So instead of sending me 12 different emails all related to 1 node, I just get 1 email with everything that's wrong with the node?

And yes... really need to dig into alerting to get rid of noise...

Thanks for the help

jkuvlesk

It sounds like you are alerting on every component monitor.  Here is guidance on when you would alert on a component and when you would alert on an application.

• Alerting on an application: In most cases, you will want to alert on an application. Alerting on an application will give you one alert and tell you the state of the application (up/down/unknown) and the state of the component monitor and whether a component monitor has reached a warning or critical threshold. Essentially, one alert will tell you everything that is in a warning, critical, down, or unknown state for the application.
• Alerting on a component: If you alert on each component monitor in your application template, then you will get one alert for EACH component that exceeds a threshold. Alerting on a component monitor can be beneficial if you are alerting on custom scripts where you need to be alerted if the output of the script crosses a specific threshold.