Alert Engine Beta - Alert Supression

I have not set-up any Alert supprestion under the v7 Alert Engine. I would like to start using Alert Supression using the V8 Alert Engine. However I am finding it hard to understand how its works. I have a very large, very complex network and do not know where I should start. Are there any best practices available for Alert Suppression? If I understood the basic concepts for each type of suppression scheme, I would possibly understand it. Does anyone whom is currently using suppression possibly explain it to me?

Thanks

Find more posts tagged with

Accepted answers

All comments

filipv

I guess that you would need to suppress alerts for a device if a router leading to that device fails. You don't want million alerts going off if a router next to your polling server fails.

quote:Originally posted by mgibson

I have not set-up any Alert supprestion under the v7 Alert Engine. I would like to start using Alert Supression using the V8 Alert Engine. However I am finding it hard to understand how its works. I have a very large, very complex network and do not know where I should start. Are there any best practices available for Alert Suppression? If I understood the basic concepts for each type of suppression scheme, I would possibly understand it. Does anyone whom is currently using suppression possibly explain it to me?

Thanks

ckore

I believe the Orion software engine polls devices randomly so even if you have alert suppression enabled on a router, it may poll and alert off downstream devices first. Alert suppression really will not work in Orion properly until they allow you to configure the polling sequence appropriately.

mgibson

Thank You for the responses!
I have been seeing notes on v8 that would allow for setting dependencies that would allow for better alert suppression. Could someone from SW elaborate on if it is worth my while to begin creating alert suppression scenarios with the v8 beta or wait for final release??

Thanks

Network_Guru

quote:Originally posted by ckore

I believe the Orion software engine polls devices randomly so even if you have alert suppression enabled on a router, it may poll and alert off downstream devices first. Alert suppression really will not work in Orion properly until they allow you to configure the polling sequence appropriately.

As long as you set the polling interval for the upstream devices at less than half the time set for the downstream devices, then the alert suppression should work (assuming you have the fast polling timer set accordingly).

-=Cheers=-
NG

mgibson

I have done what was suggested and devices downstream now have a polling rate of double that of the upstream router. When setting up the alert suppression, how does it know to suppress alerts from the devices on the down stream side of the router as I have not identified which devices are downstream? I configured the alert using the older engine, not the beta.I am still struggling on the correct setup using the beta.

Network_Guru

quote:Originally posted by mgibson

I have done what was suggested and devices downstream now have a polling rate of double that of the upstream router. When setting up the alert suppression, how does it know to suppress alerts from the devices on the down stream side of the router as I have not identified which devices are downstream? I configured the alert using the older engine, not the beta.I am still struggling on the correct setup using the beta.

Hey Mark,

You must set up the alert suppression on all the downstream devices (I use a single alert for all the downstream devices).
Basically you tell it not to alert if the upstream device is down (you must first add the upstream device into the list of alert suppression devices).

-=Cheers=-
NG

mgibson

Thank You very much. Could you perhaps provide me with an example using both the old Alert Engine(7.4.x) and the New Beta Alert Engine?

Thank You

Network_Guru

That's pretty hard to do here on the forums Mark,
I suggest you check out the detailed on-line documentation:

www.solarwinds.net/.../chapter 4.htm
www.solarwinds.net/.../alert suppression examples.htm

& tutorials:
www2.solarwinds.net/.../Alerts.html
www2.solarwinds.net/.../AdvAlertsV7.html

-=Cheers=-
NG