Tracking who acknowledged alerts

I recently implemented the use of the Acknowledge feature for Advanced Alerts. Everything is working great. However, I'm having a hard time tracking who acknowledged alerts after the alert has been reset. As far as I can tell, no event is created when an alert is acknowledged. Has anyone else run into this problem? Is it possible to query this imformation?

Find more posts tagged with

advanced_alerts

acknowledge_alerts

Accepted answers

bshopp

No, it did not make the cut for the next version.

You should be able to write a custom SQL report though today to pull this information I believe. We allow people to put notes on an alert and those should be logged into the DB

All comments

bshopp

We have an enhancement in the system to enable better audit trails within the Orion product, meaning who did what, when and where etc.

jdlumley

That is great to hear. Do you know if this enhancement will be included in the next update?

bshopp

No, it did not make the cut for the next version.

You should be able to write a custom SQL report though today to pull this information I believe. We allow people to put notes on an alert and those should be logged into the DB

gibjim01

This feature is also important for us. The management needs reports to illustrate the efficiency of our alerting process. Looks like the alerts are not historical. I can't get statistics for previous month and I have a 60 days event retention. They seem to disapear after the incident is resolved. Also, I've tried with the events table but the acknowledgement information is not accurate.

thewerd

I'd love to see this make it in as well.

An auditing trail would be a very valuable feature.