Severity level values and data

mestasew

Hi ..

please share your experience and ideas for  the following two questions ?

When Active or historical  alerts triggered reports are generated  by Severity  levels, the different levels of severity level   are represented by numerical values , by using the following pattern 0 - informational, 1 - warning , 2 - critical, 3 - Serious, 4 - Notice  .

can this be changed or reconfigured so that the numerical values severity can meaningfully correspond to the severity weight ? like Critical level  = 4, warning = 3 etc

is it possible to add the option of custom report created by report writer export to EXcel or CVS file ?

Thank you

mesverrum

These are hard coded into the UI so I don't think you could safely change the way they work inside the db itself, but here is an example of a custom SWQL query that uses case logic to re-order them so I could use max() to get the "worst" alert state.  I add this resource to my Node Details pages and also have leveraged a lot of this code in other reports.

select distinct

isnull(alert.alerts,0) as [Active Alerts]

,CASE

WHEN alert.severity = 5 THEN '/Orion/images/ActiveAlerts/Critical.png'

WHEN alert.severity = 4 THEN '/Orion/images/ActiveAlerts/Serious.png'

WHEN alert.severity = 3 THEN '/Orion/images/ActiveAlerts/Warning.png'

WHEN alert.severity = 2 THEN '/Orion/images/ActiveAlerts/InformationalAlert.png'

WHEN alert.severity = 1 THEN '/Orion/images/ActiveAlerts/Notice.png'

ELSE '/Orion/images/StatusIcons/Small-Up.gif'

END AS [_iconfor_Active Alerts]

,case when n.cpuload < 0 then 'Not Polled'

when n.host.nodeid is not null and n.host.cpucorecount is not null then concat(round(n.host.cpuload,0),'% of ',n.host.CpuCoreCount,' CPU')

when n.CPUCount is not null then concat(cpuload,'% of ',n.CPUCount,' CPU')

else 'Polling Error'

end as [CPU Load]

,'/ui/perfstack/?presetTime=last7Days&charts=0_Orion.Nodes_'+tostring(nodeid)+'-Orion.CPULoad.AvgLoad,0_Orion.Nodes_'+tostring(nodeid)+'-Orion.CPULoad.MaxLoad;0_Orion.Nodes_'+tostring(nodeid)+'-Orion.CPUMultiLoad.MaxLoad;' as [_linkfor_CPU Load]

,CASE

WHEN cpuload >= htc.Level2Value THEN '/Orion/images/StatusIcons/Small-Critical.gif'

WHEN cpuload >= htc.Level1Value THEN '/Orion/images/StatusIcons/Small-Warning.gif'

WHEN cpuload < htc.Level1Value  THEN '/Orion/images/StatusIcons/Small-Up.gif'

WHEN cpuload >= n.CpuLoadThreshold.Level2Value and htc.Name is null THEN '/Orion/images/StatusIcons/Small-Critical.gif'

WHEN cpuload >= n.CpuLoadThreshold.Level1Value and htc.Name is null THEN '/Orion/images/StatusIcons/Small-Warning.gif'

WHEN cpuload <  n.CpuLoadThreshold.Level1Value and htc.Name is null THEN '/Orion/images/StatusIcons/Small-Up.gif'

END AS [_IconFor_CPU Load]

,case when percentmemoryused < 0 then 'Not Polled'

else concat(percentmemoryused,'% of ',(round(n.totalmemory/1073741824,0)),' GB')

end as [Memory Used]

,'/ui/perfstack/?presetTime=last7Days&charts=0_Orion.Nodes_'+tostring(nodeid)+'-Orion.CPULoad.AvgPercentMemoryUsed,0_Orion.Nodes_'+tostring(nodeid)+'-Orion.CPULoad.MaxMemoryUsed,0_Orion.Nodes_'+tostring(nodeid)+'-Orion.CPULoad.TotalMemory;' as [_linkfor_Memory Used]

,CASE

WHEN percentmemoryused >= htm.Level2Value and htm.Name = 'VIM.Hosts.Stats.MemUsage' THEN '/Orion/images/StatusIcons/Small-Critical.gif'

WHEN percentmemoryused >= htm.Level1Value and htm.Name = 'VIM.Hosts.Stats.MemUsage' THEN '/Orion/images/StatusIcons/Small-Warning.gif'

WHEN percentmemoryused < htm.Level1Value and htm.Name = 'VIM.Hosts.Stats.MemUsage' THEN '/Orion/images/StatusIcons/Small-Up.gif'

WHEN percentmemoryused >= n.percentmemoryusedThreshold.Level2Value THEN '/Orion/images/StatusIcons/Small-Critical.gif'

WHEN percentmemoryused >= n.percentmemoryusedThreshold.Level1Value THEN '/Orion/images/StatusIcons/Small-Warning.gif'

WHEN percentmemoryused <  n.percentmemoryusedThreshold.Level1Value THEN '/Orion/images/StatusIcons/Small-Up.gif'

END AS [_IconFor_Memory Used]

,CASE

WHEN responsetime<0 then 'No Response'

ELSE concat(responsetime,' ms')

END AS [Latency]

,'/ui/perfstack/?presetTime=last7Days&charts=0_Orion.Nodes_'+tostring(nodeid)+'-Orion.PerfStack.Status,0_Orion.Nodes_'+tostring(nodeid)+'-Orion.ResponseTime.MaxResponseTime,0_Orion.Nodes_'+tostring(nodeid)+'-Orion.ResponseTime.AvgResponseTime;' as [_linkfor_Latency]

,CASE

WHEN responsetime >= n.responsetimeThreshold.Level2Value THEN '/Orion/images/StatusIcons/Small-Critical.gif'

WHEN responsetime >= n.responsetimeThreshold.Level1Value THEN '/Orion/images/StatusIcons/Small-Warning.gif'

WHEN responsetime <  n.responsetimeThreshold.Level1Value THEN '/Orion/images/StatusIcons/Small-Up.gif'

END AS [_IconFor_Latency]

,concat(percentloss,'%') as [Packet Loss]

,'/ui/perfstack/?presetTime=last7Days&charts=0_Orion.Nodes_'+tostring(nodeid)+'-Orion.ResponseTime.Availability,0_Orion.Nodes_'+tostring(nodeid)+'-Orion.PerfStack.Status,0_Orion.Nodes_'+tostring(nodeid)+'-Orion.ResponseTime.PercentLoss;' as [_linkfor_Packet Loss]

,CASE

WHEN percentloss >= n.percentlossThreshold.Level2Value THEN '/Orion/images/StatusIcons/Small-Critical.gif'

WHEN percentloss >= n.percentlossThreshold.Level1Value THEN '/Orion/images/StatusIcons/Small-Warning.gif'

WHEN percentloss <  n.percentlossThreshold.Level1Value THEN '/Orion/images/StatusIcons/Small-Up.gif'

END AS [_IconFor_Packet Loss]

--,n.percentmemoryusedThreshold.Level1Value

from orion.nodes n

left join Orion.VIM.HostThresholds htc on htc.host.NodeID=n.NodeID and htc.Name = 'VIM.Hosts.Stats.CPULoad'

left join Orion.VIM.HostThresholds htm on htm.host.NodeID=n.NodeID and htm.Name = 'VIM.Hosts.Stats.MemUsage'

left join (select aa.AlertObjects.RelatedNodeId, count(aa.AlertActiveID) as Alerts

, max(case WHEN aa.AlertObjects.AlertConfigurations.Severity = 2 then 5

WHEN aa.AlertObjects.AlertConfigurations.Severity = 3 then 4

WHEN aa.AlertObjects.AlertConfigurations.Severity = 1 then 3

WHEN aa.AlertObjects.AlertConfigurations.Severity = 0 then 2

WHEN aa.AlertObjects.AlertConfigurations.Severity = 5 then 1

END) as Severity

from orion.AlertActive aa

group by aa.AlertObjects.RelatedNodeId) alert on alert.relatednodeid=n.nodeid

where nodeid =${nodeid}

order by [CPU Load]

-Marc Netterfield

    Loop1 Systems: SolarWinds Training and Professional Services

•                 LinkedIN: Loop1 Systems
•                 Facebook: Loop1 Systems
•                 Twitter: @Loop1Systems