Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Management metrics and tools for Orion

First off, let me congratulate the SW product and Dev teams on the re-focus I've seen in the last year or so on critically examining the feature sets and finally starting to deliver on some really fantastic and long-standing product deficiencies that have made working with the software sub-optimal for quite some time. Now as long as I have the time to implement them, it looks like the product is really starting to get a level of refinement and sophistication that's to be expected for a product we rely on as heavily as we do.

All that being said, I get a list of management questions daily that I answer using data from other sources and we should be able to get from Orion.

1) How many alerts of ActionType Email fired in the previous 24 hours, 48, 72, day/week/month/year/range? Of those, how many triggered emails? What addresses were they sent to?

2) Export a listing of all alerts that are active from traps, syslog, and polls.

3) Broad stroke alert modifications. Ability to export entire table of advanced alerts to individual XML files, or one large one with them all in one. Preferably able to export a CSV of everything, make modifications to it, and re-import.

Peter

Find more posts tagged with

Accepted answers

All comments

lhorstma

1) How many alerts of ActionType Email fired in the previous 24 hours, 48, 72, day/week/month/year/range? Of those, how many triggered emails? What addresses were they sent to?

I was playing with something similar earlier today. I wrote a report in Report Writer to give me alert log info. Basically Management asked why an alert had not been sent, which it had, so I made a report available to them to show all email alerts sent out over the last 24 hours so they can verify themselves.

Go to Report Writer, create a new Advanced SQL report, and modify the below query to fit your needs:

SELECT AlertLog.LogDateTime, AlertLog.ObjectType, AlertLog.ObjectName, AlertLog.Message

FROM AlertLog

WHERE AlertLog.LogDateTime BETWEEN DATEADD(day, -1, getdate() ) and getdate() AND AlertLog.ActionType like 'EMail'

ORDER BY AlertLog.LogDateTime desc

The only problem is the To: field contents in the message are stripped/messed up so don't show where the email was sent to (though it sometimes shows CC: and BCC: info, which without the To: will just confuse people).

You can modify it to fit what you need, but hopefully it gives you somewhere to start. Maybe there's another way to get past alert info, this is just the way I did it.

netlogix

You could include the current definition for who it would sent to (but that's not necessarily who it was sent to, but who it would be sent to is it triggered right now)

SELECT AlertLog.LogDateTime, AlertLog.ObjectType, AlertLog.ObjectName, AlertLog.Message, ActionDefinitions.Target
FROM AlertLog inner join ActionDefinitions on ActionDefinitions.AlertDefID = AlertLog.AlertDefID and AlertLog.ActionType = ActionDefinitions.ActionType
WHERE AlertLog.LogDateTime BETWEEN DATEADD(day, -1, getdate() ) and getdate() AND AlertLog.ActionType like 'EMail'
ORDER BY AlertLog.LogDateTime desc

pserwe

Okay.. that's pretty hot. I have to play with it a little bit more so I can target different ranges and such, wrap the sql, but it works at first glance, and really nicely. If I weren't in the middle of some other fairly attention grabbing items, I'd post more.

More to follow,

Peter

pserwe

So, in a report, that looks pretty nasty and unmanageable, although very granular. Things to love and things to hate about that

What I was really looking for is summary lines of each Alert type, sorted by distro. I'm going to play with some options and see what I can get for counts out of it, but really I'm looking to generate summarization data for high level management purposes, so my focus is going to be towards something I can pump into a CSV and generate more sophisticated reports, or just ones that correlate with a lot of external data in excel until such point as we can manage the myriad of data sources better.

I'll play some more and post some more later, but so far, I'm still counting emails in outlook, which kind of sucks a little.

I still have trap based alerting that is largely un-addressed in this alerting framework unless I can trigger some sort of action that registers against a non-trap poller alert, but this data does give a great view of everything except Syslog and Traps. Now if I can work on turning it into something more like summary data, I think I can get what I want out of it.

Peter