Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Complex Advanced Alert, Need Some Help

I am trying to figure out a way to write an advanced alert but I am not sure if it is possible.

I am watching a value on a network device and I want to know if that value goes above the configured threshold more than x number of times in y number of polls.

For example: If response time is greater than 20 milliseconds for 3 checks out of the 5 checks that that take place in a 25 minute period (5 minute collection/check interval); trigger an alert.

Is something like this possible and if so, how?

Find more posts tagged with

advance_alerts

Accepted answers

All comments

mcbridea

We certainly can trigger on a specific number of violations over a specific time span. The polling period is constant so is it possible for this case you could just use violations per period time as the trigger?

byrona

Well, I could certainly try this. How exactly would I configure it to trigger on a specific number of violations over a specific time period?

byrona

Hrm, I am guessing something like the following...

If I want it to trigger only after 3 violations across a 15 minute time period that I would tell it to [check alert every 5 minutes] and [do not trigger until condition exists for more than 14 minutes]

or something to that effect?

mcbridea

It would have to be a parameter that the device could trap on the use Trap Viewer Alerts to filter. The Trap alerts can trigger by number of occurances per time. I thought that was in Advanced Alerts but I am mistaken. In Advanced Alert Manager you could use the "Do not trigger this action until condition exists for more than ..." and make that for 10 minutes so if it exists for 2 SNMP polls you would get alerted. Does this do what you need?