ORION NPM ALERT SUPPRESSION PROBLEM

telecaster

ORION ADVANCED ALERT SUPPRESSION PROMLEM

i am having problems configuring alert suppression on orion npm

i have configured the following alerts

 

remote-server-1 is down

IP Address is equal to 192.168.7.2

Node Status is equal to Down

　

remote-server-2 is down

IP Address is equal to 192.168.7.3

Node Status is equal to Down

　

remote-3550 is down

IP Address is equal to 192.168.6.1

Node Status is equal to Down

　

remote-3640 is down

ip address is equal to 192.168.5.2

node status is equal to down

　

these alerts seem to work fine ie if remote server 1 or 2 goes down

I get an alert telling me that, if remote-3550 goes down I get alerts

telling me that remote 3550 and remote server 1 and 2 have gone

down, if remote 3640 goes down I get alerts that remote 3640 is down

that remote 3550 is down and that remote server's 1 and 2 are down

　

what I want to achieve is this

if remote-server 1 or 2 goes down I get an alert telling me that

if remote-3550 goes down I get an alert for that but alerts

informing me that the remote servers are down are suppressed

if remote-3640 goes down I get an alert for that but i want

to suppress alerts informing me that remote-3550 and the remote

servers are down

to try and acheive this i configured the following alerts

　

remote-server-1 is down

IP Address is equal to 192.168.7.2

Node Status is equal to Down

alert suppression

IP Address is equal to 192.168.6.1

Node Status is equal to Down

　

　

remote-server-2 is down

IP Address is equal to 192.168.7.3

Node Status is equal to Down

alert suppression

IP Address is equal to 192.168.6.1

Node Status is equal to Down

　

　

remote-3550 is down

IP Address is equal to 192.168.6.1

Node Status is equal to Down

alert suppression

IP Address is equal to 192.168.5.2

Node Status is equal to Down

　

　

remote-3640 is down

IP Address is equal to 192.168.5.2

Node Status is equal to Down

　

　

　

alerts remote-server-1 is down and

remote-server-2 is down seem to work

okay if the remote-3550 switch is up

and running

the problems start if nodes remote-3550

or remote-3640 goes down if this happens

the alert suppression on alerts

remote-server-1 is down

remote-server-2 is down

remote-3550 is down

only work !!!SOMETIMES!!!

ie if i shutdown node remote-3550

i sometimes get an alert that

remote-server 1 and 2 are down

along with the alert that remote-3550

is down

similarly if i shut down node remote-3640

i sometimes get alerts that remote-3550

and remote-server 1 and 2 are down along

with the alert that remote-3640 is down

i am new to this program so i have probably

not configured this correctly

any help on the above problems will be greatly appreciated

regards

Melvyn Brown

ps

i have included the configuration for the entire network

the computer hosting orion is running windows server 2003

with service pack 2 with 4 GB of memory the processor is

a AMD Phenom ιι X4 955 3.2 GHz　

　

　

　

　

　

　

　

　

　

　

　

　

krubin

The Alert Suppression is design to work on the whole NPM/Orion database at not only the alert you just has defined.

So if you have a Alert Suppression like "IP Address is equal to 192.168.6.1" it will all ways be true as long as you have a device with IP 192.168.6.1, and there will be NO alert.

More info in the document below:

http://www.solarwinds.com/support/Orion/docs/UnderstandingOrionAdvancedAlerts.pdf

If someone from Solarwinds development reads this, please consider designing the Alert Suppression different, so it will work on the alert you are defining in the Alert tap.

Regards,

Kasper Rubin