Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Using Report Writer to show duration between an advanced alert trigger and the reset

I have an advanced alert setup to show me when an interface utilization hits 70% for over 15 minutes. The reset action is set to reset when the trigger is no longer true.

Both the trigger and reset write an event to the event log one on alarm and one on reset.

Now that is working fine I have created a report in report writer to display both the trigger event and the reset event for each interface and report it with a datetime.

I have to manually calulate the time between each trigger event and the reset event.

What I need now is to see in the report how long the trigger event lasted before it reset.

Is there a way in report writer to calculate minutes between the trigger event in event log and the reset event in event log and display that in the report?

Thanks.

Find more posts tagged with

Accepted answers

All comments

Carlitox

Sorry for bringing this post out of the dead. I looking for a way to send and alarm when an interface is over 80% util for over two hours.

How is your set?

FormerMember

What I did was first I created a custom interface property called Utilization_report_enabled

Then set that property to true for all interfaces i wanted to report the high utilization on

in the alert manager i created an alert where ALL of the following apply: utilization_report_enabled is equal to true
and ANY of the following apply XMIT Utilization is greater than 70% or RCV Utilization is greater than 70
then set to only trigger the alert when the condition is true for 15 minutes

under alert actions you can set this to write an event log, email you etc..
same for the reset when the trigger condition is no longer true.

Your alarm would look very similar with the exception that instead of 15 minutes yours would be 120 minutes.

Apocalypse21

Now I'm the guy bringing this back from the dead. I'm wondering how you could possibly get a count for these "utilization exception" events for monitored interfaces and put them in a report thats ranks them highest to lowest based on that "exception count".

Does anybody have any ideas?