NEED syslog alerts to be included in Orion alerts

When will the syslog "alerts" be visible as an Orion alert? The NOC uses a single dashboard. and some would only come from syslog. when can we have a single interface to see ALL alerts.

We NEED this. ALL alerts on a single screen!!!!!!!

Please Please Please

Find more posts tagged with

network_monitoring

syslog__alerts

network_management

Accepted answers

All comments

FormerMember

very much want this too... all alerts should be put togethers, traps, syslogs and advanced alerts (just dump the basic alerts, they suck LOL)

byrona

I understand what you are looking for here but the problem is the way Orion does it's Alerts via the Alert Resource requires the alerts to be stateful. Syslogs and Traps are not stateful and therefore can't be displayed there in any useful way.

I put in a Feature Request a long time back for a consolidated alert view and in the new version of Orion they have made a bit of progress on this with the Message Center, though it still doesn't completely satisfy what I think we are looking for.

We need a truly consolidated Alert view for purposes such as NOC's.

bshopp

Understood. We put message center there as a step in the right direction, but not the end all solution. The broader solution will take longer and is more complex.

Network_Guru

Still waiting on this one....

What I'm really after is full integration into the NPM DB, so that I can use the customized alert suppression as per this post:TIPS & TRICKS: Stop the madness! Avoiding alerts but continuing to pull statistics.

Example:

We have many WAN circuits using ethernet interfaces (DGE).

In the past we could rely on the local serial transport type interface going down to alert us when circuit was down.

Typically now our routers are connected to the service providers ethernet switch or NID.

When there is an outage, it is somewhere downstream of this local connection but the ethernet interface stays up.

Our first indication that there is a problem is when we receive syslog alerts for the routing protocol going down on the router.

However, many times the service providers circuit is bouncing or flapping and this generates hundreds or thousands of syslog e-mail messages per hour from this one device.

I'd like to be able to suppress the syslog alerts by going into Orion and simply acknowledging them on the node or interface details page.

Or as others have requested, from a single NOC view - message center type page.

Is there a feature request already in for this?

rob.hock

Definitely a known feature request and something we are actively thinking about. Would you happen to have 30 minutes available next week to discuss?

Network_Guru

Sure Rob. just PM or e-mail me.

tomjacobchirayil

You can consider Alert Central as well.

Regards,

Tom Jacob

deverts

Rob,

I'm sure SW staff has already considered this, but are you looking to incorporate Kiwi Syslog Server, Orion Message Center and Alert Central? Each is a component, and each has things that the others need. Combined as they are today, they are almost the perfect alerting engine...there are only a couple of open requests out there to make it a perfect solution.

deverts

Oh, forgot to include...please provide the Windows Log Forwarder as part of Orion NPM as well. Please, please, please....