Advanced Alerting Issue Involving Time of Day

I currently have 4 advanced alerts that monitor the same alert trigger, which is a custom poll for an active IPSec tunnel. I had to create 4 different advanced alerts to cover my time of day issue. During the hours of 6 am to 6 pm on weekdays, I want no delay in alerting me if an IPSec tunnel goes down. However, during non-business hours or on the weekends, I want Orion to wait 30 minutes before sending me an alert. All of this is working properly, except for one piece.

Since there are four different alerts all monitoring for the same trigger condition, I could technically get up to 4 emails for the same event. I am now trying to make my advanced alerts "smart" enough not to trigger if one of the other advanced alerts for the same event triggered already.

An example would be, an IPSec tunnel goes down at 5:00 pm on Friday and does not get resolved until Monday at 8 am. In this scenario, I would get the initial email (which is the alert action) at 5:00 pm, then I would get one at 6:31 pm (30 minutes after 6:01 pm which is when the next alert is active), then one at 12:31 am on Saturday, and lastly at 12:31 am on Monday. Granted all of these would be for the same one event.

Does anyone know of a way to make the alerts not fire if it has already fired on a different alert? Or a better question would be, does anyone have a better way of configuring this solution than the way described?

Thanks in advance.

Find more posts tagged with

trigger

time_of_day

delay

Alerts

advanced

Accepted answers

FormerMember

I've captured your request.

All comments

jodros

Anyone have any suggestions?

Thanks

jodros

Is anyone running different time of day alerts for the same general network event? Any input would be appreciated.

stacy.patten

We do customized alerting across multiple timezones and we manage this through multiple alerts based on customized information. We use country or region custom properties as part of the alert processing and have multiple alerts based around the support region for it. So, anything in the Western Hemisphere will qualify for an alert by custom properties defining North or Latin America and call an alerts with time restrictions for those business hours.

Does this help?

jodros

That isn't exactly the issue that I am experiencing. I appreciate the info. My issue pertains to a specific router event that is triggering 4 different times since I have 4 advanced alerts. I had to create 4 alerts to cover my time of day issue. Breakdown below:

Morning hours: M - F 12am - 5:59am (delay 30 minutes)

Business hours: M - F 6am - 6pm (no delay)

Evening hours: M - F 6:01 pm - 11:59 pm (delay 30 minutes)

Weekends: S-Sun 12:00am (Sat) - 11:59pm (Sun) (delay 30 minutes)

My issue is that I am now sometimes getting multiple alerts for the same event. An example of my issue is in my original post.

qle

As far as I know, this just isn't possible at all. The best you can do is set the action(s) not to trigger if the alert has been acknowledged. However, as you've laid it out, I can see how this could be useful so perhaps a feature request is in order?