Polling Engine Alert

Running NPM 12.2. I was wondering is there a way to send an alert when a new Polling engine is added to the environment? I would like a group to receive an email when an additional polling engine is added.

-Jai

Find more posts tagged with

orion alerts

Accepted answers

adatole

I looked, and I don't see an audit event for this. But I'm flagging aLTeReGo to see if he knows differently.

If you have a small number of engines, you could do something a little brute force but simple:

Orion Object: Polling Engine

Field: Display Name

Display Name <> "serverA"

AND Display Name <> "serverB"

AND Display Name <> "serverC"

A new server would be flagged in this way.

For servers going offline, you could treat them like any other node. Again, a brute force way would be

WHERE

status <> "up"

AND

(Display Name <> "serverA"

OR Display Name <> "serverB"

OR Display Name <> "serverC")

All comments

adatole

It doesn't seem like this would be something that happened unexpectedly. Is this a concern for you?

wrecktangle

It is a concern, mostly in a political sense. And to further the question, I'd like to know when a Polling Engine is added and removed. My Orion instance is share/used amongst three departments. Managers of those departments would like to get notified when those actions take place.

I know there's internal methods for resolving what is basically a communication issue. I posed the question as a potential low-hanging-fruit solution.

-Jai

adatole

I looked, and I don't see an audit event for this. But I'm flagging aLTeReGo to see if he knows differently.

If you have a small number of engines, you could do something a little brute force but simple:

Orion Object: Polling Engine

Field: Display Name

Display Name <> "serverA"

AND Display Name <> "serverB"

AND Display Name <> "serverC"

A new server would be flagged in this way.

For servers going offline, you could treat them like any other node. Again, a brute force way would be

WHERE

status <> "up"

AND

(Display Name <> "serverA"

OR Display Name <> "serverB"

OR Display Name <> "serverC")

wrecktangle

adatole wrote:
I looked, and I don't see an audit event for this.

Great minds think alike...I checked audit events as well

adatole wrote:
If you have a small number of engines, you could do something a little brute force but simple:

I have 13 engines with 3 more coming online in two weeks. Is that considered small?

adatole wrote:
Orion Object: Polling Engine
Field: Display Name
Display Name <> "serverA"
AND Display Name <> "serverB"
AND Display Name <> "serverC"
A new server would be flagged in this way.
For servers going offline, you could treat them like any other node. Again, a brute force way would be
WHERE
status <> "up"
AND
(Display Name <> "serverA"
OR Display Name <> "serverB"
OR Display Name <> "serverC")

Thanks! I'll give this a shot.

aLTeReGo

adatole is correct. There is not audit event for when Additional Polling Engines are added to Orion, mostly because this is not something which occurs within the confines of Orion itself, and therefore could not be mapped back to a specific Orion user.

If you want to alert on this the simplest way would be to write an Advanced SQL alert which counts the total number of rows in the engines table and alerts you when the number is greater than or less than that number. This could also be done using thresholds, visualized in Orion and even generate an event if you did this using a SAM SQL User Experience Monitor.