Alert reset help!!!

Question

Here is my issue and if there is a way to do this fantastic but I think it is more of a feature request.

So here is the scenario I have approximately 50 alerts configured that have multiple suppression scenarios configured.  I have two trigger actions that occur in the event of an outage.  1.  Send an email to the appropriate support team.  2. Send an email to the support manager if the alert has exceeded 20 minutes.

On the alert reset I have it set to email appropriate parties that the device is back online.  Here is what I need to configure.  If the device was not down long enough to trigger the escalation I don't need the support manager to be emailed.  So basically I am looking for the ability to say if trigger action 2 did not occur don't execute reset action 2.  Does this make sense

The only way I see to do this is to duplicate my 50 alerts and set them not to trigger until they have been down for 20 and then the support manager would be notified correctly in both the alert and reset actions.

Please tell me that there is an easier way to do this or that this is something potentially on the roadmap.

Thanks

mdriskell · Answer

After thinking about it a little more, I think it may be possible to do this with a VB script if you're willing to take the dive. Depending on your comfort level with VB, you could write a script that updates a file(s) that will track whether the trigger has fired. It's probably more trouble than it's worth but I figured I'd throw it out there.

Not familiar with VB, thanks for the thought though.....we have already started down the dubious task of duplicating all our alerts.

qle · Answer

After thinking about it a little more, I think it may be possible to do this with a VB script if you're willing to take the dive. Depending on your comfort level with VB, you could write a script that updates a file(s) that will track whether the trigger has fired. It's probably more trouble than it's worth but I figured I'd throw it out there.

mdriskell · Answer

Thanks, I was afraid that was the answer and I was hoping someone from Solarwinds would have stepped in and said that was on the roadmap.  I will put this in as a feature request.  I am a little dissapointed that I know have to duplicate my alerts and that any time we have an alert there will be two that show up on the alerts screen.  Hopefully this is taken into consideration before we make a major network change or I will have 100 alerts to alter.