Alerts when a node is placed into unmanaged status

Is there a way to get alerts when someone logs into Orion and sets the device to unmanaged? I have setup an alert with all of the conditions but, only get alerts when the node is re-managed. I know alerts are suppressed for a node once it's unmanaged, which is probably the issue. There has to be a way to do this. Has anyone found a way to do this?

Find more posts tagged with

npm alerts

Accepted answers

neomatrix1217

You can try using the Auditing Event

Unmanaged Node.PNG

All comments

neomatrix1217

You can try using the Auditing Event

Unmanaged Node.PNG

david.grimm

Thank you! That seemed to do the trick. I made the reset condition the same but set to node managed and its not firing off an email alert, so I'm still working on the reset condition.

Also, since its an auditing event, I don't get the node variables I wanted inside of the alert. No big deal there, I can manage around that.

bman6074

Is there a way to set this alert on any nodes that are set unmanaged over 48hrs duration? Many times people are unmanaging nodes for months then the node is turned off but never removed from solarwinds. then is comes back manged and alerts its down. I want to have this alert as an informational notification so we can keep track of who and why the node has been unmanged longer then 49hrs.

bman6074

Hi David,

Curious what you found about getting information about the node that is unmanged. Like node name, unmanaged from, till and who unmanaged the node.

i was able to get the Node name, From, Till dates but unable to get who unmanaged it

here is what i set up for the trigger and trigger action. I can't seem to find a variable to caption the username. Any ideas??

fursel

Anyone figured it out maybe ? Information notification would be great to have for nodes which have been unmanaged or alerts muted for longer time than X.