Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Root Level Group; Field in Alert

I have a large root level group of "Remote Sites" with 200+ remote sites grouped in. I'd like to create the logic of "If 5 group members in "Remote Sites" go down, then do X".

I don't see the ability to use root level or anything similar in the alert structure. I suppose I could use a custom property, but would be another place to maintain,

Find more posts tagged with

Accepted answers

All comments

mesverrum

Correct there is nothing special in the groups structure to designate being "root" technically root level is just all the folders that aren't explicitly nested inside any other folders, its just the leftovers. You could build what you are describing with a group custom property and complex alert condition, or custom swql/sql. Pick your poison.

rfroembgen

Hi,

i am not an SQL expert, but this should help you.

Create a custom sql trigger condition, select the table "group member" which will generate a sql query. Add the following two lines:

INNER JOIN Containers AS root ON root.ContainerID = Containers_AlertsAndReportsData.GroupID

WHERE EntityType LIKE 'Orion.Groups' AND root.name LIKE 'Remote Sites' AND root.status = 0

Also check the option "enable complex conditions" within "advanced options"

Set the objects value to 5. If the SQL query now returns 5 or more objects, your alert will be triggered.

It should look like this:

If you want to get an email with the Group Site names which are down then set up a trigger action with slightly altered SQL query:

Check "SQL" custom variable and use the following SQL statement:

SELECT member.Name, 'http://YOURORIONSERVERNAME' + member.MemberAncestorDetailsUrls

FROM [dbo].[ContainerMemberSnapshots] member

INNER JOIN Containers AS root ON root.ContainerID = member.ContainerID

WHERE EntityType LIKE 'Orion.Groups' AND root.name LIKE 'Remote Sites' AND root.status = 0

You will get informations like:

Groupname Orion-link-to-group

Your email action should look like:

Hope this helps.

If you run into any troubles, feel free to ask.

Best Regards

Rene

mesverrum

I like where your head is going with this, but I think there are some problems with this as it is described. The Remote Sites group would not have a status of 0 unless all the members were unknown, you would need to fix the first query so that it shows when the member groups are down, which is status code 2.

Also, that message you created for the email won't work, the custom SQL variable only allows you to return a response with 1 row and 1 column, you can use SQL tricks like xmlpath to string multiple rows into a single line with embedded line breaks to make it look like more entries, or, because you are using the complex alert condition you can just use the normal variable for the member group name and wrap it in <<< >>>, which is a trick that makes Orion return whatever is inside the braces repeatedly for each object that is part of the initial trigger of the complex alert. You can see an example using that syntax in the out of the box alert called

"Polling rate limit exceeded"

rfroembgen

Hi mesverrum,

thanks for correcting me. That trick with the braces is amazing, did not know it yet. Thanks alot!

I will try to post a fixed SQL query soon.

Best Regards

Rene