Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Can you have Adv Alert with Node AND Interface conditions?

I need to be able to define the following TRIGGER:

-------------------
(Trigger alert when 'all' apply)

Custom Property "DisplayGrouping" equal to "WAN Sites".
NodeStatus equal to "Up".
InterfaceStatus equal to "Down".
-------------------

When you create an Advanced Alert, there is a drop-down where you select the "Type of Property to Monitor". You have to select Node OR Interface, there is no "both". Let me explain why I need to combine these conditions in this manner...

We have a VPN appliance that through normal operation, may have a DSL or T1 attached to it's "Eth1" interface. These devices have cellular EVDO modems (PCMCIA cards) that serve as backup Internet options, if the main connection is down. We have no means of alerting when the primary connection goes down and the devices fail over, because the LAN/VPN address we monitor doesn't change. If a devices' Eth1 goes down, the EVDO powers up and connects to the Internet, the next time Orion polls the device it's still...UP.

What we've found is when the device has failed and is using its EVDO connection, Orion reports the Node UP, but the single Eth1 interface we're monitoring is DOWN.

---
Node status is Up
'eth1-Outside (12.135.205.229)' is Down.
---

I need to define an Advanced Alert to tell me when this is the case for my VPN appliances, so I know we've had a failure and can engage my team to investigate. If I create an Advanced Alert with "Type of Property to Monitor", I could monitor the Eth1 interface but I would NOT want to receive an alert if the NODE was DOWN. I expect the "Eth1" to be down when the Node is down... I don't expect the Node to be UP and Eth1 to be DOWN.

Is there a way to combine NODE and INTERFACE properties within an Advanced Alert? Feature request?

Find more posts tagged with

Accepted answers

All comments

sedmo

It looks to me like you could do this by selecting Interface for the Type of Property to Monitor. This appears to give access to both Node and Interface fields.

chris.schear

Just noticed that...

When your "Property to Monitor" is NODE - you have NODE and INTERFACE options until you actually add a Node-level condition. After that, the Interface options vanish. However, when your property to monitor is INTERFACE, both NODE and INTERFACE menu items remain accessible.

I'll have to do some testing...

willhepptemp

For what it's worth, I wanted to do something similar but couldn't figure it out either (so if going the interface route works, please post back a response!) What I wanted was to see which devices Orion wasn't able read properly so I set a Node alert where:

Status Description contains Unknown

Node Status is not equal to Down

Node Status is not equal to Warning

It seems to work just fine...

Will

chris.schear

Creating an INTERFACE alert and including both NODE parameters AND INTERFACE parameters is working well for me. I have successfully created an alert that fires when the NODE is UP, but the INTERFACE is 'not up'. (down, shutdown, warning, testing, etc.)