Active Alerts - Unacknowledged

Hi All,

It seems what when an application alert is triggered it displays on my Solarwinds console under "Active Application Alerts - All Unacknowledged alerts" which is fine, however, when the alert is no longer true, it seems that these unacknowledged alerts are not "Clearing" from the display and remain even through there is not application issues on that node. Is there a way to have the unacknowledged alerts clear if the alert is no longer true.

Any help would be greatly appreciated.

Below is the display and Alert setup.

Active Alerts.JPG

Find more posts tagged with

sam

solarwinds

apm

active_alerts

Alerts

Accepted answers

All comments

aLTeReGo

Has this alert ever worked as you described it should? By default all alerts are cleared from this resource once the trigger condition is no longer true. What I think the problem might be is an issue in your condition logic. When you read the alert above aloud replace "All" with "And". Then replace "any" with "or". You will see that your last condition may be the culprit for why this alert is not working properly.

Application Status is equal to warning OR critical OR the Application Name is not equal to HTTP Monitor for ......

syn3rgy

Hi aLTeReGo,

Thank you for your reply.

The alerts did used to clear until i upgraded.

How do i change the "All" to And and "any" with or as the drop down list only gives you "all, any, none, not all"

syn3rgy

Also,

Just to expand on this.

for the "Active Application Alerts - All Unacknowledged Alerts" it dows the network node, application name and message.

If you do the "Active Alerts - All Unacknowleged alerts" it shows the network device.

Is there some way to get the "Active Alerts - All Unacknowleged alerts" to look more like the "Active Application Alerts - All Unacknowledged Alerts" thus making the "Active Application Alerts - All Unacknowledged Alerts" irrelevant if you want to just see all "active alerts" for node and application:

aLTeReGo

The way I would write the alert is pictured below. Try making this change and see if it resolves the issue. If it does not I recommend opening a case with support so we can troubleshoot this further.

Alert Logic.png

aLTeReGo

While this isn't possible using the existing resources, if you're running NPM 10.3 or later you can create your own custom resources by adding the "Custom Query" resource to any view. You'll need to write the SWQL query yourself using information documented in the Orion SDK.

syn3rgy

Hi aLTeReGo,

Thank you. I think this is a little out of my League (not really familure with writing queries). is there a way i can get the query for the Active application alerts and the active alerts so that i can maybe try and work it out?

Thank you

Rob

aLTeReGo

Honestly it's over my head as well and really was designed for developer use only. If you don't have anyone in your organization with programming experience you may be able to ask for some basic assistance in the SDK forum.