Alert Suppression status 'Resource'

chris.engstrom

To get a quick report on what muted/suppressed alerts you have in your implementation:

Adding a 'Custom Query' resource to your view;

Add the following SWQL:

Select A.caption as Node,

    A.DetailsURL as [_LinkFor_Node],

    SQ.SuppressFrom,

    SQ.SuppressUntil

From Orion.Nodes A

right JOIN

(    SELECT ID, substring(EntityUri,53,4) as NodeID, SuppressFrom, SuppressUntil

    FROM Orion.AlertSuppression a) AS SQ on SQ.NodeID = A.NodeID

ORDER BY SuppressUntil

I hope this helps you as much as it has helped us.

mesverrum

I'm about to take off on a plane but wanted to point out that the join there on the sub query is a little dicey how it is now.  They are likely to add other types of objects to the suppression feature eventually and when that happens your join is probably going to break.  I'll try to come up with some error handling logic when I get some time