Is there a way to build a report for all active serious and critical alerts? It seems that when I go to the report manager and try to build a report my only option is all active alerts.
I need the same. Unfortunately, with SAM and NPM being such relentless spam machines, even criticals are not critical and warnings not really warnings, and Unknown status just kill any kind of hope for clean reporting on alerts.
Hello enderaz,
Use custom table, Selection Method Database Query use the below query. Modify the eventTypeword whichever required.
SELECT TOP 90000 * FROM
[dbo].[AlertHistoryView] a,[dbo].[Nodes] b
Where
a.relatednodeid = b.nodeid and
a.EventTypeWord in('Triggered' ,'Acknowledged')
and a.timestamp >= getdate() - 1
order by a.timestamp asc
Then Add the details you want.
Thanks for this. How can I add a custom property filter?
I really hate how SW does reporting, it's the only thing I miss from Cisco Prime. I feel like I need to go take DBA classes in order to do simple reporting, where with Cisco Prime I just needed to check or uncheck the applicable boxes.
Agreed. Not everyone is a DBA. And you need one to support this kind of custom reporting. I envy those that can truly code. It's a talent you cannot purchase anywhere.
Try This.
SELECT TOP 10
NodesData.Caption
,NodesData.IP_Address
,NodesData.Vendor
,AlertHistory.Message
,AlertHistory.TimeStamp
,NodesCustomProperties.NodeClassification
,NodesCustomProperties.NodeRole
,NodesCustomProperties.AssetTag
FROM dbo.NodesData
,dbo.AlertHistory
,dbo.NodesCustomProperties
WHERE AlertHistory.TimeStamp >= GETDATE() -1
Please note:
Change Select top 10 to a higher value depending on your setup.
Add/Modify custom properties marked in bold, You can copy the line and add as much as custom properties in this.
Modify Get Date -1 to pull out the number of days old alerts...
Cheers!!
