How can I find an send/delivered SMS?

remi_f

Hello,

Today there was an event:

15-7-2014 6:33:49

Event

Node Fil5053_WS2000 is Down.

This event triggered an alert and the alert has send an SMS.

My question is where can I find that there was an email or SMS send? My colleague acknowledged that he has received this SMS, but I can't find this in the triggered alert list.

In our Managed Alerts I can not find a logical name for this application and now I don't know which alert I need to change. We are not using Alert Central only Alert Manager.

I know our next step would be that I am making the name of the alerts matching the Monitors

Please help.

Regard Remi

Find more posts tagged with

Alert

sms

Events

Accepted answers

martinstenner

Is it possible that somebody has cleared or acknowledged the latest alert?

The only way I can think of retrieving the data is to look at the SQL table 'AlertLog'. Do this:

From your Solarwinds server, open 'Database Manager'.

Click 'Add default server' and then browse to the correct database (e.g. NetPerfMon). Expand this and look for 'AlertLog'.

Execute a query against this (e.g. SELECT TOP 1000 * FROM [dbo].[AlertLog]) and look at the returned results to find the alert that triggered.

If this doesn't help, then perhaps raise a support case with Solarwinds?

All comments

martinstenner

If you look at Active Alert (View->Active Alerts) under the Alert Manager application running on your Solarwinds server, you should be able to see the Alert Name which corresponds to the object or node that triggered the alarm.

The same is possible in the web console under 'Alerts'.

Once you know the alert you need to edit, then you can set the necessary actions and test them before making live.

remi_f

The latest alert according to the Active Alert in the Alert Manager was on 12-07-2014 19:27 and this alert is from 15-07-2014 6:33. Why can't I see this alert in the active alert list or anywhere else then in the events?

martinstenner

Is it possible that somebody has cleared or acknowledged the latest alert?

The only way I can think of retrieving the data is to look at the SQL table 'AlertLog'. Do this:

From your Solarwinds server, open 'Database Manager'.

Click 'Add default server' and then browse to the correct database (e.g. NetPerfMon). Expand this and look for 'AlertLog'.

Execute a query against this (e.g. SELECT TOP 1000 * FROM [dbo].[AlertLog]) and look at the returned results to find the alert that triggered.

If this doesn't help, then perhaps raise a support case with Solarwinds?

martinstenner

An alternative method (although perhaps not as thorough as the above) for looking at historical alerts is to go through the 'Message Center' (http://server_name/Orion/NetPerfMon/OrionMessages.aspx)

If you want, filter by device

Select the required time period to report on

Tick 'Show triggered alerts' and deselect the rest

Click 'Apply'.

remi_f

I have found the alert in the database manager:

1491994

15-7-2014 6:33

867e7820-e08e-483f-b1b8-c17d82af75bb

Node

1270

Fil5053_WS2000

Alert Triggered

Thanks for that!

To bad that it doesn't show which alert has been triggered. I couldn't find this in my alert list. Do you think I should make a case for this?

martinstenner

So, the SMS message is going to come from the 'Execute program : powershell.exe ... "C:\Alert_Scripts\SMS_Alert.ps1" action. This action is called for both your trigger and reset

This would be a custom powershell script written by somebody in your organisation. I would suggest reviewing this powershell script if necessary.

When an event occurs (node down), if an associated alert action exists (i.e. email, write to solarwinds event and then execute a program when said node goes down) then only the main action will be notified in your event logs (node down) and only the name of the alert action 'KA: Alert me when a node goes down' will appear in your alerts log.

To my knowledge, solarwinds is unlikely to know about the triggering of the powershell script, or receive any direct results. That powershell script will trigger a SMS to be sent via the necessary equipment with values passed from your solarwinds server.

We only write to the event log and email out.